{"schema_version":"1.7.3","id":"openSUSE-SU-2023:0193-1","published":"2023-07-26T14:08:03Z","modified":"2026-02-04T02:59:54.746375Z","related":["CVE-2023-3727","CVE-2023-3728","CVE-2023-3730","CVE-2023-3732","CVE-2023-3733","CVE-2023-3734","CVE-2023-3735","CVE-2023-3736","CVE-2023-3737","CVE-2023-3738","CVE-2023-3740"],"upstream":["CVE-2023-3727","CVE-2023-3728","CVE-2023-3730","CVE-2023-3732","CVE-2023-3733","CVE-2023-3734","CVE-2023-3735","CVE-2023-3736","CVE-2023-3737","CVE-2023-3738","CVE-2023-3740"],"summary":"Security update for chromium","details":"This update for chromium fixes the following issues:\n\nChromium 115.0.5790.102:\n\n* stability fix\n\nChromium 115.0.5790.98:\n\n* Security: The Storage, Service Worker, and Communication APIs\n  are now partitioned in third-party contexts to prevent certain\n  types of side-channel cross-site tracking\n* HTTPS: Automatically and optimistically upgrade all main-frame\n  navigations to HTTPS, with fast fallback to HTTP.\n* CSS: accept multiple values of the display property\n* CSS: support boolean context style container queries\n* CSS: support scroll-driven animations\n* Increase the maximum size of a WebAssembly.Module() on the main\n  thread to 8 MB\n* FedCM: Support credential management mediation requirements for\n  auto re-authentication\n* Deprecate the document.domain setter\n* Deprecate mutation events\n* Security fixes (boo#1213462):\n\n  - CVE-2023-3727: Use after free in WebRTC\n  - CVE-2023-3728: Use after free in WebRTC\n  - CVE-2023-3730: Use after free in Tab Groups\n  - CVE-2023-3732: Out of bounds memory access in Mojo\n  - CVE-2023-3733: Inappropriate implementation in WebApp Installs\n  - CVE-2023-3734: Inappropriate implementation in Picture In Picture\n  - CVE-2023-3735: Inappropriate implementation in Web API Permission Prompts\n  - CVE-2023-3736: Inappropriate implementation in Custom Tabs\n  - CVE-2023-3737: Inappropriate implementation in Notifications\n  - CVE-2023-3738: Inappropriate implementation in Autofill\n  - CVE-2023-3740: Insufficient validation of untrusted input in Themes\n  - Various fixes from internal audits, fuzzing and other initiatives\n","affected":[{"package":{"name":"chromium","ecosystem":"SUSE:Package Hub 15 SP4","purl":"pkg:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2015%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0.5790.102-bp155.2.13.1"}]}],"ecosystem_specific":{"binaries":[{"chromedriver":"115.0.5790.102-bp155.2.13.1","chromium":"115.0.5790.102-bp155.2.13.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2023:0193-1.json"}},{"package":{"name":"chromium","ecosystem":"SUSE:Package Hub 15 SP5","purl":"pkg:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2015%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0.5790.102-bp155.2.13.1"}]}],"ecosystem_specific":{"binaries":[{"chromedriver":"115.0.5790.102-bp155.2.13.1","chromium":"115.0.5790.102-bp155.2.13.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2023:0193-1.json"}},{"package":{"name":"chromium","ecosystem":"openSUSE:Leap 15.4","purl":"pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2015.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0.5790.102-bp155.2.13.1"}]}],"ecosystem_specific":{"binaries":[{"chromedriver":"115.0.5790.102-bp155.2.13.1","chromium":"115.0.5790.102-bp155.2.13.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2023:0193-1.json"}},{"package":{"name":"chromium","ecosystem":"openSUSE:Leap 15.5","purl":"pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2015.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"115.0.5790.102-bp155.2.13.1"}]}],"ecosystem_specific":{"binaries":[{"chromedriver":"115.0.5790.102-bp155.2.13.1","chromium":"115.0.5790.102-bp155.2.13.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2023:0193-1.json"}}],"references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7YFWX4SWCVBUO47OZ3HWZCBOE3G7ZGAE/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1213462"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-3727"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-3728"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-3730"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-3732"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-3733"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-3734"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-3735"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-3736"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-3737"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-3738"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-3740"}]}