openSUSE-SU-2021:1350-1
Security update for chromium
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for chromium fixes the following issues: Chromium 94.0.4606.81 (boo#1191463): * CVE-2021-37977: Use after free in Garbage Collection * CVE-2021-37978: Heap buffer overflow in Blink * CVE-2021-37979: Heap buffer overflow in WebRTC * CVE-2021-37980: Inappropriate implementation in Sandbox Chromium 94.0.4606.54 (boo#1190765): * CVE-2021-37956: Use after free in Offline use * CVE-2021-37957: Use after free in WebGPU * CVE-2021-37958: Inappropriate implementation in Navigation * CVE-2021-37959: Use after free in Task Manager * CVE-2021-37960: Inappropriate implementation in Blink graphics * CVE-2021-37961: Use after free in Tab Strip * CVE-2021-37962: Use after free in Performance Manager * CVE-2021-37963: Side-channel information leakage in DevTools * CVE-2021-37964: Inappropriate implementation in ChromeOS Networking * CVE-2021-37965: Inappropriate implementation in Background Fetch API * CVE-2021-37966: Inappropriate implementation in Compositing * CVE-2021-37967: Inappropriate implementation in Background Fetch API * CVE-2021-37968: Inappropriate implementation in Background Fetch API * CVE-2021-37969: Inappropriate implementation in Google Updater * CVE-2021-37970: Use after free in File System API * CVE-2021-37971: Incorrect security UI in Web Browser UI * CVE-2021-37972: Out of bounds read in libjpeg-turbo Chromium 94.0.4606.61 (boo#1191166): * CVE-2021-37973: Use after free in Portals Chromium 94.0.4606.71 (boo#1191204): * CVE-2021-37974 : Use after free in Safe Browsing * CVE-2021-37975 : Use after free in V8 * CVE-2021-37976 : Information leak in core
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.2 | chromedriver, chromium | 94.0.4606.81-lp152.2.132.1 |
Mostrar las 2 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.2 | chromedriver | 94.0.4606.81-lp152.2.132.1 |
| openSUSE Leap 15.2 | chromium | 94.0.4606.81-lp152.2.132.1 |
Referencias
- https://bugzilla.suse.com/1190765
- https://bugzilla.suse.com/1191166
- https://bugzilla.suse.com/1191204
- https://bugzilla.suse.com/1191463
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FGCILKKE7TLKATFOFTDHZ573UHODPDOM/
- https://www.suse.com/security/cve/CVE-2021-37956/
- https://www.suse.com/security/cve/CVE-2021-37957/
- https://www.suse.com/security/cve/CVE-2021-37958/
Las 31 referencias
- https://www.suse.com/security/cve/CVE-2021-37959/
- https://www.suse.com/security/cve/CVE-2021-37960/
- https://www.suse.com/security/cve/CVE-2021-37961/
- https://www.suse.com/security/cve/CVE-2021-37962/
- https://www.suse.com/security/cve/CVE-2021-37963/
- https://www.suse.com/security/cve/CVE-2021-37964/
- https://www.suse.com/security/cve/CVE-2021-37965/
- https://www.suse.com/security/cve/CVE-2021-37966/
- https://www.suse.com/security/cve/CVE-2021-37967/
- https://www.suse.com/security/cve/CVE-2021-37968/
- https://www.suse.com/security/cve/CVE-2021-37969/
- https://www.suse.com/security/cve/CVE-2021-37970/
- https://www.suse.com/security/cve/CVE-2021-37971/
- https://www.suse.com/security/cve/CVE-2021-37972/
- https://www.suse.com/security/cve/CVE-2021-37973/
- https://www.suse.com/security/cve/CVE-2021-37974/
- https://www.suse.com/security/cve/CVE-2021-37975/
- https://www.suse.com/security/cve/CVE-2021-37976/
- https://www.suse.com/security/cve/CVE-2021-37977/
- https://www.suse.com/security/cve/CVE-2021-37978/
- https://www.suse.com/security/cve/CVE-2021-37979/
- https://www.suse.com/security/cve/CVE-2021-37980/
- https://www.suse.com/support/security/rating/