openSUSE-SU-2026:21561-1

Einstufung nach Quelle

Keine Quelle nennt einen CVSS-Wert.

Trivys eigenes Label ist CRITICAL. Kritisch laut SUSE.

Beschreibung

This update for chromium fixes the following issues: Changes in chromium: - Chromium 151.0.7922.108 (boo#1274549): * CVE-2026-19137: Use after free in WebGL * CVE-2026-19149: Use after free in Aura * CVE-2026-19154: Use after free in Skia * CVE-2026-19157: Out of bounds write in ANGLE * CVE-2026-19170: Use after free in WebGL * CVE-2026-19172: Use after free in Views * CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks * CVE-2026-19168: Inappropriate implementation in V8 * CVE-2026-19138: Heap buffer overflow in CrashReporting * CVE-2026-19139: Race in CredentialProvider * CVE-2026-19140: Use after free in GPU * CVE-2026-19141: Use after free in Resources * CVE-2026-19142: Use after free in Views * CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs * CVE-2026-19144: Use after free in HTML * CVE-2026-19145: Use after free in Translate * CVE-2026-19146: Uninitialized Use in GPU * CVE-2026-19147: Use after free in Aura * CVE-2026-19148: Out of bounds write in GPU * CVE-2026-19150: Inappropriate implementation in V8 * CVE-2026-19151: Use after free in V8 * CVE-2026-19152: Inappropriate implementation in Navigation * CVE-2026-19153: Insufficient validation of untrusted input in Workers * CVE-2026-19155: Use after free in Payments * CVE-2026-19156: Heap buffer overflow in Base * CVE-2026-19158: Use after free in Views * CVE-2026-19159: Use after free in Views * CVE-2026-19160: Uninitialized Use in Skia * CVE-2026-19161: Uninitialized Use in Skia * CVE-2026-19162: Out of bounds write in V8 * CVE-2026-19163: Use after free in Media * CVE-2026-19164: Insufficient validation of untrusted input in Codecs * CVE-2026-19165: Use after free in Extensions * CVE-2026-19166: Use after free in Web Authentication * CVE-2026-19167: Integer overflow in GPU * CVE-2026-19171: Use after free in Media * CVE-2026-19173: Out of bounds write in Skia * CVE-2026-19174: Integer overflow in V8 * CVE-2026-19175: Use after free in Payments * CVE-2026-19176: Use after free in Skia * CVE-2026-19177: Insufficient validation of untrusted input in UI

Betroffene Pakete und behobene Versionen

Referenzen

• https://bugzilla.suse.com/1274549
• https://www.suse.com/security/cve/CVE-2026-19137/
• https://www.suse.com/security/cve/CVE-2026-19138/
• https://www.suse.com/security/cve/CVE-2026-19139/
• https://www.suse.com/security/cve/CVE-2026-19140/
• https://www.suse.com/security/cve/CVE-2026-19141/
• https://www.suse.com/security/cve/CVE-2026-19142/
• https://www.suse.com/security/cve/CVE-2026-19143/