openSUSE-SU-2020:2021-1
Security update for chromium
Kaynağa göre önem derecesi
Hiçbir kaynak CVSS puanı vermiyor.
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: SUSE.
Açıklama
This update for chromium fixes the following issues: - Update to 87.0.4280.66 (boo#1178923) - Wayland support by default - CVE-2020-16018: Use after free in payments. - CVE-2020-16019: Inappropriate implementation in filesystem. - CVE-2020-16020: Inappropriate implementation in cryptohome. - CVE-2020-16021: Race in ImageBurner. - CVE-2020-16022: Insufficient policy enforcement in networking. - CVE-2020-16015: Insufficient data validation in WASM. R - CVE-2020-16014: Use after free in PPAPI. - CVE-2020-16023: Use after free in WebCodecs. - CVE-2020-16024: Heap buffer overflow in UI. - CVE-2020-16025: Heap buffer overflow in clipboard. - CVE-2020-16026: Use after free in WebRTC. - CVE-2020-16027: Insufficient policy enforcement in developer tools. R - CVE-2020-16028: Heap buffer overflow in WebRTC. - CVE-2020-16029: Inappropriate implementation in PDFium. - CVE-2020-16030: Insufficient data validation in Blink. - CVE-2019-8075: Insufficient data validation in Flash. - CVE-2020-16031: Incorrect security UI in tab preview. - CVE-2020-16032: Incorrect security UI in sharing. - CVE-2020-16033: Incorrect security UI in WebUSB. - CVE-2020-16034: Inappropriate implementation in WebRTC. - CVE-2020-16035: Insufficient data validation in cros-disks. - CVE-2020-16012: Side-channel information leakage in graphics. - CVE-2020-16036: Inappropriate implementation in cookies.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| openSUSE Leap 15.2 | chromedriver, chromium | 87.0.4280.66-lp152.2.51.1 |
1 kaynaktaki 2 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| openSUSE Leap 15.2 | chromedriver | 87.0.4280.66-lp152.2.51.1 |
| openSUSE Leap 15.2 | chromium | 87.0.4280.66-lp152.2.51.1 |
Referanslar
- https://bugzilla.suse.com/1178923
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FVE6T2JL6PI433CTW6BAFC3ROZDJMVMC/
- https://www.suse.com/security/cve/CVE-2019-8075/
- https://www.suse.com/security/cve/CVE-2020-16012/
- https://www.suse.com/security/cve/CVE-2020-16014/
- https://www.suse.com/security/cve/CVE-2020-16015/
- https://www.suse.com/security/cve/CVE-2020-16018/
- https://www.suse.com/security/cve/CVE-2020-16019/
26 referansın hepsi
- https://www.suse.com/security/cve/CVE-2020-16020/
- https://www.suse.com/security/cve/CVE-2020-16021/
- https://www.suse.com/security/cve/CVE-2020-16022/
- https://www.suse.com/security/cve/CVE-2020-16023/
- https://www.suse.com/security/cve/CVE-2020-16024/
- https://www.suse.com/security/cve/CVE-2020-16025/
- https://www.suse.com/security/cve/CVE-2020-16026/
- https://www.suse.com/security/cve/CVE-2020-16027/
- https://www.suse.com/security/cve/CVE-2020-16028/
- https://www.suse.com/security/cve/CVE-2020-16029/
- https://www.suse.com/security/cve/CVE-2020-16030/
- https://www.suse.com/security/cve/CVE-2020-16031/
- https://www.suse.com/security/cve/CVE-2020-16032/
- https://www.suse.com/security/cve/CVE-2020-16033/
- https://www.suse.com/security/cve/CVE-2020-16034/
- https://www.suse.com/security/cve/CVE-2020-16035/
- https://www.suse.com/security/cve/CVE-2020-16036/
- https://www.suse.com/support/security/rating/