openSUSE-SU-2020:1705-1
Security update for chromium
Severity by source
No source gives a CVSS score.
Trivy's own label is CRITICAL. Rated critical by SUSE.
Description
This update for chromium fixes the following issues: -chromium was updated to 86.0.4240.75 (boo#1177408): - CVE-2020-15967: Fixed Use after free in payments. - CVE-2020-15968: Fixed Use after free in Blink. - CVE-2020-15969: Fixed Use after free in WebRTC. - CVE-2020-15970: Fixed Use after free in NFC. - CVE-2020-15971: Fixed Use after free in printing. - CVE-2020-15972: Fixed Use after free in audio. - CVE-2020-15990: Fixed Use after free in autofill. - CVE-2020-15991: Fixed Use after free in password manager. - CVE-2020-15973: Fixed Insufficient policy enforcement in extensions. - CVE-2020-15974: Fixed Integer overflow in Blink. - CVE-2020-15975: Fixed Integer overflow in SwiftShader. - CVE-2020-15976: Fixed Use after free in WebXR. - CVE-2020-6557: Fixed Inappropriate implementation in networking. - CVE-2020-15977: Fixed Insufficient data validation in dialogs. - CVE-2020-15978: Fixed Insufficient data validation in navigation. - CVE-2020-15979: Fixed Inappropriate implementation in V8. - CVE-2020-15980: Fixed Insufficient policy enforcement in Intents. - CVE-2020-15981: Fixed Out of bounds read in audio. - CVE-2020-15982: Fixed Side-channel information leakage in cache. - CVE-2020-15983: Fixed Insufficient data validation in webUI. - CVE-2020-15984: Fixed Insufficient policy enforcement in Omnibox. - CVE-2020-15985: Fixed Inappropriate implementation in Blink. - CVE-2020-15986: Fixed Integer overflow in media. - CVE-2020-15987: Fixed Use after free in WebRTC. - CVE-2020-15992: Fixed Insufficient policy enforcement in networking. - CVE-2020-15988: Fixed Insufficient policy enforcement in downloads. - CVE-2020-15989: Fixed Uninitialized Use in PDFium.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| openSUSE Leap 15.1 | chromedriver, chromium, gn | 86.0.4240.75-lp152.2.39.1 and 1 more |
| openSUSE Leap 15.2 | chromedriver, chromium, gn | 86.0.4240.75-lp152.2.39.1 and 1 more |
Show all 6 entries from 2 sources
| Source | Package | Fixed in |
|---|---|---|
| openSUSE Leap 15.1 | chromedriver | 86.0.4240.75-lp152.2.39.1 |
| openSUSE Leap 15.1 | chromium | 86.0.4240.75-lp152.2.39.1 |
| openSUSE Leap 15.1 | gn | 0.1807-lp152.2.3.1 |
| openSUSE Leap 15.2 | chromedriver | 86.0.4240.75-lp152.2.39.1 |
| openSUSE Leap 15.2 | chromium | 86.0.4240.75-lp152.2.39.1 |
| openSUSE Leap 15.2 | gn | 0.1807-lp152.2.3.1 |
References
- https://bugzilla.suse.com/1177408
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RSRYM5HZR7DJFCM4PTV3322SCZDBNVEX/
- https://www.suse.com/security/cve/CVE-2020-15967/
- https://www.suse.com/security/cve/CVE-2020-15968/
- https://www.suse.com/security/cve/CVE-2020-15969/
- https://www.suse.com/security/cve/CVE-2020-15970/
- https://www.suse.com/security/cve/CVE-2020-15971/
- https://www.suse.com/security/cve/CVE-2020-15972/
All 30 references
- https://www.suse.com/security/cve/CVE-2020-15973/
- https://www.suse.com/security/cve/CVE-2020-15974/
- https://www.suse.com/security/cve/CVE-2020-15975/
- https://www.suse.com/security/cve/CVE-2020-15976/
- https://www.suse.com/security/cve/CVE-2020-15977/
- https://www.suse.com/security/cve/CVE-2020-15978/
- https://www.suse.com/security/cve/CVE-2020-15979/
- https://www.suse.com/security/cve/CVE-2020-15980/
- https://www.suse.com/security/cve/CVE-2020-15981/
- https://www.suse.com/security/cve/CVE-2020-15982/
- https://www.suse.com/security/cve/CVE-2020-15983/
- https://www.suse.com/security/cve/CVE-2020-15984/
- https://www.suse.com/security/cve/CVE-2020-15985/
- https://www.suse.com/security/cve/CVE-2020-15986/
- https://www.suse.com/security/cve/CVE-2020-15987/
- https://www.suse.com/security/cve/CVE-2020-15988/
- https://www.suse.com/security/cve/CVE-2020-15989/
- https://www.suse.com/security/cve/CVE-2020-15990/
- https://www.suse.com/security/cve/CVE-2020-15991/
- https://www.suse.com/security/cve/CVE-2020-15992/
- https://www.suse.com/security/cve/CVE-2020-6557/
- https://www.suse.com/support/security/rating/