openSUSE-SU-2020:0893-1
Security update for chromium
Einstufung nach Quelle
Keine Quelle nennt einen CVSS-Wert.
Trivys eigenes Label ist CRITICAL. Kritisch laut SUSE.
Beschreibung
This update for chromium fixes the following issues: Chromium was updated to 83.0.4103.116 (boo#1173251): * CVE-2020-6509: Use after free in extensions Chromium was updated to 83.0.4103.106 (boo#1173029): * CVE-2020-6505: Use after free in speech * CVE-2020-6506: Insufficient policy enforcement in WebView * CVE-2020-6507: Out of bounds write in V8 Other fixes: - Add patch to work with new ffmpeg wrt boo#1173292: - Add multimedia fix for disabled location and also try one additional patch from Debian on the same issue boo#1173107 - Disable wayland integration on 15.x boo#1173187 boo#1173188 boo#1173254 - Enforce to not use system borders boo#1173063
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| openSUSE Leap 15.2 | chromedriver, chromium | 83.0.4103.116-lp152.2.3.1 |
Alle 2 Einträge aus 1 Quelle zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| openSUSE Leap 15.2 | chromedriver | 83.0.4103.116-lp152.2.3.1 |
| openSUSE Leap 15.2 | chromium | 83.0.4103.116-lp152.2.3.1 |
Referenzen
- https://bugzilla.suse.com/1173029
- https://bugzilla.suse.com/1173063
- https://bugzilla.suse.com/1173107
- https://bugzilla.suse.com/1173187
- https://bugzilla.suse.com/1173188
- https://bugzilla.suse.com/1173251
- https://bugzilla.suse.com/1173254
- https://bugzilla.suse.com/1173292
Alle 14 Referenzen
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PJ7X57IWGLSUHYBIMARADLW7OWMGZ2JB/
- https://www.suse.com/security/cve/CVE-2020-6505/
- https://www.suse.com/security/cve/CVE-2020-6506/
- https://www.suse.com/security/cve/CVE-2020-6507/
- https://www.suse.com/security/cve/CVE-2020-6509/
- https://www.suse.com/support/security/rating/