openSUSE-SU-2020:0893-1
Security update for chromium
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for chromium fixes the following issues: Chromium was updated to 83.0.4103.116 (boo#1173251): * CVE-2020-6509: Use after free in extensions Chromium was updated to 83.0.4103.106 (boo#1173029): * CVE-2020-6505: Use after free in speech * CVE-2020-6506: Insufficient policy enforcement in WebView * CVE-2020-6507: Out of bounds write in V8 Other fixes: - Add patch to work with new ffmpeg wrt boo#1173292: - Add multimedia fix for disabled location and also try one additional patch from Debian on the same issue boo#1173107 - Disable wayland integration on 15.x boo#1173187 boo#1173188 boo#1173254 - Enforce to not use system borders boo#1173063
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.2 | chromedriver, chromium | 83.0.4103.116-lp152.2.3.1 |
Mostrar las 2 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.2 | chromedriver | 83.0.4103.116-lp152.2.3.1 |
| openSUSE Leap 15.2 | chromium | 83.0.4103.116-lp152.2.3.1 |
Referencias
- https://bugzilla.suse.com/1173029
- https://bugzilla.suse.com/1173063
- https://bugzilla.suse.com/1173107
- https://bugzilla.suse.com/1173187
- https://bugzilla.suse.com/1173188
- https://bugzilla.suse.com/1173251
- https://bugzilla.suse.com/1173254
- https://bugzilla.suse.com/1173292
Las 14 referencias
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PJ7X57IWGLSUHYBIMARADLW7OWMGZ2JB/
- https://www.suse.com/security/cve/CVE-2020-6505/
- https://www.suse.com/security/cve/CVE-2020-6506/
- https://www.suse.com/security/cve/CVE-2020-6507/
- https://www.suse.com/security/cve/CVE-2020-6509/
- https://www.suse.com/support/security/rating/