openSUSE-SU-2020:1309-1

Kaynağa göre önem derecesi

Hiçbir kaynak CVSS puanı vermiyor.

Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: SUSE.

Açıklama

This update for chromium fixes the following issues: Chromium was updated to version 85.0.4183.83 (boo#1175757) fixing: - CVE-2020-6558: Insufficient policy enforcement in iOS - CVE-2020-6559: Use after free in presentation API - CVE-2020-6560: Insufficient policy enforcement in autofill - CVE-2020-6561: Inappropriate implementation in Content Security Policy - CVE-2020-6562: Insufficient policy enforcement in Blink - CVE-2020-6563: Insufficient policy enforcement in intent handling. - CVE-2020-6564: Incorrect security UI in permissions - CVE-2020-6565: Incorrect security UI in Omnibox. - CVE-2020-6566: Insufficient policy enforcement in media. - CVE-2020-6567: Insufficient validation of untrusted input in command line handling. - CVE-2020-6568: Insufficient policy enforcement in intent handling. - CVE-2020-6569: Integer overflow in WebUSB. - CVE-2020-6570: Side-channel information leakage in WebRTC. - CVE-2020-6571: Incorrect security UI in Omnibox.

Etkilenen paketler ve düzeltilmiş sürümler

Referanslar

• https://bugzilla.suse.com/1175757
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NZRVEJRFFBV3ZLOR477D3BXYX3LEWCSV/
• https://www.suse.com/security/cve/CVE-2020-6558/
• https://www.suse.com/security/cve/CVE-2020-6559/
• https://www.suse.com/security/cve/CVE-2020-6560/
• https://www.suse.com/security/cve/CVE-2020-6561/
• https://www.suse.com/security/cve/CVE-2020-6562/
• https://www.suse.com/security/cve/CVE-2020-6563/