openSUSE-SU-2020:0893-1
Security update for chromium
Sévérité par source
Aucune source ne donne de score CVSS.
Le label propre à Trivy est CRITICAL. Critique selon SUSE.
Description
This update for chromium fixes the following issues: Chromium was updated to 83.0.4103.116 (boo#1173251): * CVE-2020-6509: Use after free in extensions Chromium was updated to 83.0.4103.106 (boo#1173029): * CVE-2020-6505: Use after free in speech * CVE-2020-6506: Insufficient policy enforcement in WebView * CVE-2020-6507: Out of bounds write in V8 Other fixes: - Add patch to work with new ffmpeg wrt boo#1173292: - Add multimedia fix for disabled location and also try one additional patch from Debian on the same issue boo#1173107 - Disable wayland integration on 15.x boo#1173187 boo#1173188 boo#1173254 - Enforce to not use system borders boo#1173063
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| openSUSE Leap 15.2 | chromedriver, chromium | 83.0.4103.116-lp152.2.3.1 |
Afficher les 2 entrées d'une source
| Source | Paquet | Corrigé en |
|---|---|---|
| openSUSE Leap 15.2 | chromedriver | 83.0.4103.116-lp152.2.3.1 |
| openSUSE Leap 15.2 | chromium | 83.0.4103.116-lp152.2.3.1 |
Références
- https://bugzilla.suse.com/1173029
- https://bugzilla.suse.com/1173063
- https://bugzilla.suse.com/1173107
- https://bugzilla.suse.com/1173187
- https://bugzilla.suse.com/1173188
- https://bugzilla.suse.com/1173251
- https://bugzilla.suse.com/1173254
- https://bugzilla.suse.com/1173292
Les 14 références
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PJ7X57IWGLSUHYBIMARADLW7OWMGZ2JB/
- https://www.suse.com/security/cve/CVE-2020-6505/
- https://www.suse.com/security/cve/CVE-2020-6506/
- https://www.suse.com/security/cve/CVE-2020-6507/
- https://www.suse.com/security/cve/CVE-2020-6509/
- https://www.suse.com/support/security/rating/