{"id":"openSUSE-SU-2026:22023-1","summary":"Security update for chromium","details":"This update for chromium fixes the following issues:\n\nChanges in chromium:\n\n- Chromium 154.0.8037.97 (boo#1284015)\n  * CVE-2026-103628: Out of bounds write in WebGL\n  * CVE-2026-103626: Incorrect authorization in FileSystem\n  * CVE-2026-103621: Integer overflow in Compositing\n  * CVE-2026-103630: Use after free in FedCM\n  * CVE-2026-103625: Type confusion in V8\n  * CVE-2026-103624: Use after free in Contextual Tasks\n  * CVE-2026-103629: Integer overflow in Skia\n  * CVE-2026-103622: Use after free in SVG\n  * CVE-2026-103623: Use after free in MediaStream\n  * CVE-2026-103631: Buffer overflow in WebRTC\n  * CVE-2026-103627: Information leak in SVG\n","modified":"2026-10-07T17:23:11.524954038Z","published":"2026-10-06T06:37:05Z","related":["CVE-2026-103621","CVE-2026-103622","CVE-2026-103623","CVE-2026-103624","CVE-2026-103625","CVE-2026-103626","CVE-2026-103627","CVE-2026-103628","CVE-2026-103629","CVE-2026-103630","CVE-2026-103631"],"upstream":["CVE-2026-103621","CVE-2026-103622","CVE-2026-103623","CVE-2026-103624","CVE-2026-103625","CVE-2026-103626","CVE-2026-103627","CVE-2026-103628","CVE-2026-103629","CVE-2026-103630","CVE-2026-103631"],"references":[{"type":"ADVISORY"},{"type":"REPORT","url":"https://bugzilla.suse.com/1284015"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-103621"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-103622"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-103623"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-103624"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-103625"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-103626"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-103627"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-103628"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-103629"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-103630"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-103631"}],"affected":[{"package":{"name":"chromium","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"154.0.8037.97-bp160.1.1"}]}],"ecosystem_specific":{"binaries":[{"chromedriver":"154.0.8037.97-bp160.1.1","chromium":"154.0.8037.97-bp160.1.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22023-1.json"}}],"schema_version":"1.9.0"}