SUSE alert openSUSE-SU-2026:0052-1 (chromium)
| From: | maintenance@opensuse.org | |
| To: | security-announce@lists.opensuse.org | |
| Subject: | openSUSE-SU-2026:0052-1: important: Security update for chromium | |
| Date: | Tue, 17 Feb 2026 00:04:47 +0100 | |
| Message-ID: | <20260216230447.CF187FD1A@maintenance.suse.de> | |
| Archive-link: | Article |
openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2026:0052-1 Rating: important References: #1258116 #1258185 #1258199 Cross-References: CVE-2026-2313 CVE-2026-2314 CVE-2026-2315 CVE-2026-2316 CVE-2026-2317 CVE-2026-2318 CVE-2026-2319 CVE-2026-2320 CVE-2026-2321 CVE-2026-2322 CVE-2026-2323 CVE-2026-2441 Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: This update for chromium fixes the following issues: - fix INSTALL.sh again to replace the tags in desktop file, appdata and manpage (boo#1258199) - Chromium 145.0.7632.75: * CVE-2026-2441: Use after free in CSS (boo#1258185) - Chromium 145.0.7632.67: * Revert a change in url_fixer that may have caused crashes - Chromium 145.0.7632.45 (boo#1258116) * jpeg-xl support has been readded * CVE-2026-2313: Use after free in CSS * CVE-2026-2314: Heap buffer overflow in Codecs * CVE-2026-2315: Inappropriate implementation in WebGPU * CVE-2026-2316: Insufficient policy enforcement in Frames * CVE-2026-2317: Inappropriate implementation in Animation * CVE-2026-2318: Inappropriate implementation in PictureInPicture * CVE-2026-2319: Race in DevTools * CVE-2026-2320: Inappropriate implementation in File input * CVE-2026-2321: Use after free in Ozone * CVE-2026-2322: Inappropriate implementation in File input * CVE-2026-2323: Inappropriate implementation in Downloads Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2026-52=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 x86_64): chromedriver-145.0.7632.75-bp156.2.231.1 chromium-145.0.7632.75-bp156.2.231.1 References: https://www.suse.com/security/cve/CVE-2026-2313.html https://www.suse.com/security/cve/CVE-2026-2314.html https://www.suse.com/security/cve/CVE-2026-2315.html https://www.suse.com/security/cve/CVE-2026-2316.html https://www.suse.com/security/cve/CVE-2026-2317.html https://www.suse.com/security/cve/CVE-2026-2318.html https://www.suse.com/security/cve/CVE-2026-2319.html https://www.suse.com/security/cve/CVE-2026-2320.html https://www.suse.com/security/cve/CVE-2026-2321.html https://www.suse.com/security/cve/CVE-2026-2322.html https://www.suse.com/security/cve/CVE-2026-2323.html https://www.suse.com/security/cve/CVE-2026-2441.html https://bugzilla.suse.com/1258116 https://bugzilla.suse.com/1258185 https://bugzilla.suse.com/1258199