openSUSE-SU-2020:1499-1
Security update for chromium
Einstufung nach Quelle
Keine Quelle nennt einen CVSS-Wert.
Trivys eigenes Label ist CRITICAL. Kritisch laut SUSE.
Beschreibung
This update for chromium fixes the following issues: Chromium was updated to version 85.0.4183.102 (bsc#1176306) fixing: - CVE-2020-6573: Use after free in video. - CVE-2020-6574: Insufficient policy enforcement in installer. - CVE-2020-6575: Race in Mojo. - CVE-2020-6576: Use after free in offscreen canvas. - CVE-2020-15959: Insufficient policy enforcement in networking. Chromium was updated to version 85.0.4183.83 (boo#1175757) fixing: - CVE-2020-6558: Insufficient policy enforcement in iOS - CVE-2020-6559: Use after free in presentation API - CVE-2020-6560: Insufficient policy enforcement in autofill - CVE-2020-6561: Inappropriate implementation in Content Security Policy - CVE-2020-6562: Insufficient policy enforcement in Blink - CVE-2020-6563: Insufficient policy enforcement in intent handling. - CVE-2020-6564: Incorrect security UI in permissions - CVE-2020-6565: Incorrect security UI in Omnibox. - CVE-2020-6566: Insufficient policy enforcement in media. - CVE-2020-6567: Insufficient validation of untrusted input in command line handling. - CVE-2020-6568: Insufficient policy enforcement in intent handling. - CVE-2020-6569: Integer overflow in WebUSB. - CVE-2020-6570: Side-channel information leakage in WebRTC. - CVE-2020-6571: Incorrect security UI in Omnibox.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| openSUSE Leap 15.1 | chromedriver, chromium | 85.0.4183.102-lp152.2.30.1 |
| openSUSE Leap 15.2 | chromedriver, chromium | 85.0.4183.102-lp152.2.30.1 |
Alle 4 Einträge aus 2 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| openSUSE Leap 15.1 | chromedriver | 85.0.4183.102-lp152.2.30.1 |
| openSUSE Leap 15.1 | chromium | 85.0.4183.102-lp152.2.30.1 |
| openSUSE Leap 15.2 | chromedriver | 85.0.4183.102-lp152.2.30.1 |
| openSUSE Leap 15.2 | chromium | 85.0.4183.102-lp152.2.30.1 |
Referenzen
- https://bugzilla.suse.com/1175757
- https://bugzilla.suse.com/1176306
- https://bugzilla.suse.com/1176450
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DVLIV2CRZYKLIUJ6AKW5DXJ5TG44WR3E/
- https://www.suse.com/security/cve/CVE-2020-15959/
- https://www.suse.com/security/cve/CVE-2020-6558/
- https://www.suse.com/security/cve/CVE-2020-6559/
- https://www.suse.com/security/cve/CVE-2020-6560/
Alle 24 Referenzen
- https://www.suse.com/security/cve/CVE-2020-6561/
- https://www.suse.com/security/cve/CVE-2020-6562/
- https://www.suse.com/security/cve/CVE-2020-6563/
- https://www.suse.com/security/cve/CVE-2020-6564/
- https://www.suse.com/security/cve/CVE-2020-6565/
- https://www.suse.com/security/cve/CVE-2020-6566/
- https://www.suse.com/security/cve/CVE-2020-6567/
- https://www.suse.com/security/cve/CVE-2020-6568/
- https://www.suse.com/security/cve/CVE-2020-6569/
- https://www.suse.com/security/cve/CVE-2020-6570/
- https://www.suse.com/security/cve/CVE-2020-6571/
- https://www.suse.com/security/cve/CVE-2020-6573/
- https://www.suse.com/security/cve/CVE-2020-6574/
- https://www.suse.com/security/cve/CVE-2020-6575/
- https://www.suse.com/security/cve/CVE-2020-6576/
- https://www.suse.com/support/security/rating/