CVE-2023-6112

Use after free in Navigation in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

The chromium-browser-stable package has been updated to the 119.0.6045.159 release, fixing bugs and 15 vulnerabilities, together with 119.0.6045.123 and 119.0.6045.105; some of them are listed below:

High CVE-2023-5480: Inappropriate implementation in Payments. Reported by Vsevolod Kokorin (Slonser) of Solidlab on 2023-10-14

High CVE-2023-5482: Insufficient data validation in USB. Reported by DarkNavy on 2023-10-13

High CVE-2023-5849: Integer overflow in USB. Reported by DarkNavy on 2023-10-13

High CVE-2023-5996: Use after free in WebAudio. Reported by Huang Xilin of Ant Group Light-Year Security Lab via Tianfu Cup 2023 on 2023-10-30

High CVE-2023-5997: Use after free in Garbage Collection. Reported by Anonymous on 2023-10-31

High CVE-2023-6112: Use after free in Navigation. Reported by Sergei Glazunov of Google Project Zero on 2023-11-04

Medium CVE-2023-5850: Incorrect security UI in Downloads. Reported by Mohit Raj (shadow2639) on 2021-12-22

Medium CVE-2023-5851: Inappropriate implementation in Downloads. Reported by Shaheen Fazim on 2023-08-18

Medium CVE-2023-5852: Use after free in Printing. Reported by [pwn2car] on 2023-09-10

Medium CVE-2023-5853: Incorrect security UI in Downloads. Reported by Hafiizh on 2023-06-22

Medium CVE-2023-5854: Use after free in Profiles. Reported by Dohyun Lee (@l33d0hyun) of SSD-Disclosure Labs & DNSLab, Korea Univ on 2023-10-01

Medium CVE-2023-5855: Use after free in Reading Mode. Reported by ChaobinZhang on 2023-10-13

Medium CVE-2023-5856: Use after free in Side Panel. Reported by Weipeng Jiang (@Krace) of VRI on 2023-10-17

Medium CVE-2023-5857: Inappropriate implementation in Downloads. Reported by Will Dormann on 2023-10-18

Low CVE-2023-5858: Inappropriate implementation in WebApp Provider. Reported by Axel Chong on 2023-06-24

Low CVE-2023-5859: Incorrect security UI in Picture In Picture. Reported by Junsung Lee on 2023-09-13

This update for chromium fixes the following issues:

Chromium 119.0.6045.159 (boo#1217142)

• CVE-2023-5997: Use after free in Garbage Collection
• CVE-2023-6112: Use after free in Navigation
• Various fixes from internal audits, fuzzing and other initiatives

This update for opera fixes the following issues:

• Update to 105.0.4970.21

  • DNA-112425 Choosing Workspace Icons doesn’t work as expected
  • DNA-112787 glow around tiles in Top Sites section in BABE in dark theme

• The update to chromium 119.0.6045.159 fixes following issues: CVE-2023-5997, CVE-2023-6112

• Update to 105.0.4970.16

  • CHR-9416 Updating Chromium on desktop-stable-* branches
  • DNA-111903 [Lin] [Component-based-scrollbar] Old design is displayed on Ubuntu 20.04
  • DNA-112914 Visual glitch with HWA enabled in some random places
  • DNA-113137 [WinLin][Sidebar autohide] Sidebar panel is not connected with sidebar

• Update to 105.0.4970.13

  • CHR-9416 Updating Chromium on desktop-stable-* branches
  • DNA-111885 [Address bar] Hover effect on padlock icon is not rounded
  • DNA-112411 Active Tab in Tab Island in Dark Mode should have different colour
  • DNA-112431 Dragging tab quickly past last island on the right, causes tab to be dropped at the end of tab strip instead of at location of the cursor
  • DNA-112878 [Tab strip] Detached tab not restored after restarting browser
  • DNA-112900 Crash at opera::component_based:: ComponentTabDragController::StopViewDragging
  • DNA-112996 Translations for O105
  • DNA-113213 Promote 105 to stable

• Complete Opera 105 changelog at: https://blogs.opera.com/desktop/changelog-for-105/

• Update to 104.0.4944.54

  • DNA-111938 Option 'Automatically hide sidebar' and Full screen makes Opera freeze
  • DNA-112241 Stuttering video on some systems with OOP SW H.264 decoding
  • DNA-112636 [Tab strip] Detach button on meeting tabs moves on hover and is replaced by close tab
  • DNA-112862 Crash at extensions::BookmarksPrivateAPI:: OnListenerAdded(extensions::EventListenerInfo const&)
  • DNA-112990 Crash when closing tab tooltip and opening Search tabs

This update for opera fixes the following issues:

• Update to 105.0.4970.21

  • DNA-112425 Choosing Workspace Icons doesn’t work as expected
  • DNA-112787 glow around tiles in Top Sites section in BABE in dark theme

• The update to chromium 119.0.6045.159 fixes following issues: CVE-2023-5997, CVE-2023-6112

• Update to 105.0.4970.16

  • CHR-9416 Updating Chromium on desktop-stable-* branches
  • DNA-111903 [Lin] [Component-based-scrollbar] Old design is displayed on Ubuntu 20.04
  • DNA-112914 Visual glitch with HWA enabled in some random places
  • DNA-113137 [WinLin][Sidebar autohide] Sidebar panel is not connected with sidebar

• Update to 105.0.4970.13

  • CHR-9416 Updating Chromium on desktop-stable-* branches
  • DNA-111885 [Address bar] Hover effect on padlock icon is not rounded
  • DNA-112411 Active Tab in Tab Island in Dark Mode should have different colour
  • DNA-112431 Dragging tab quickly past last island on the right, causes tab to be dropped at the end of tab strip instead of at location of the cursor
  • DNA-112878 [Tab strip] Detached tab not restored after restarting browser
  • DNA-112900 Crash at opera::component_based:: ComponentTabDragController::StopViewDragging
  • DNA-112996 Translations for O105
  • DNA-113213 Promote 105 to stable

• Complete Opera 105 changelog at: https://blogs.opera.com/desktop/changelog-for-105/

• Update to 104.0.4944.54

  • DNA-111938 Option 'Automatically hide sidebar' and Full screen makes Opera freeze
  • DNA-112241 Stuttering video on some systems with OOP SW H.264 decoding
  • DNA-112636 [Tab strip] Detach button on meeting tabs moves on hover and is replaced by close tab
  • DNA-112862 Crash at extensions::BookmarksPrivateAPI:: OnListenerAdded(extensions::EventListenerInfo const&)
  • DNA-112990 Crash when closing tab tooltip and opening Search tabs

These are all security issues fixed in the chromedriver-119.0.6045.159-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the ungoogled-chromium-119.0.6045.159-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the libQt5Pdf5-5.15.17-1.1 package on the GA media of openSUSE Tumbleweed.