|
|
Log in / Subscribe / Register

SUSE alert openSUSE-SU-2026:20944-1 (chromium)



From:
              null@suse.de


To:
              security-announce@lists.opensuse.org


Subject:
              openSUSE-SU-2026:20944-1: critical: Security update for chromium


Date:
              Fri, 12 Jun 2026 17:51:27 +0200


Message-ID:
              <20260612155127.8B319FCE1@maintenance.suse.de>


Archive-link:
              Article


openSUSE security update: security update for chromium
-------------------------------------------------------------

Announcement ID: openSUSE-SU-2026:20944-1
Rating: critical
References:

  * bsc#1267911



Cross-References:

  * CVE-2026-11628
  * CVE-2026-11629
  * CVE-2026-11630
  * CVE-2026-11631
  * CVE-2026-11632
  * CVE-2026-11633
  * CVE-2026-11634
  * CVE-2026-11635
  * CVE-2026-11636
  * CVE-2026-11637
  * CVE-2026-11638
  * CVE-2026-11639
  * CVE-2026-11640
  * CVE-2026-11641
  * CVE-2026-11642
  * CVE-2026-11643
  * CVE-2026-11644
  * CVE-2026-11645
  * CVE-2026-11646
  * CVE-2026-11647
  * CVE-2026-11648
  * CVE-2026-11649
  * CVE-2026-11650
  * CVE-2026-11651
  * CVE-2026-11652
  * CVE-2026-11653
  * CVE-2026-11654
  * CVE-2026-11655
  * CVE-2026-11656
  * CVE-2026-11657
  * CVE-2026-11658
  * CVE-2026-11659
  * CVE-2026-11660
  * CVE-2026-11661
  * CVE-2026-11662
  * CVE-2026-11663
  * CVE-2026-11664
  * CVE-2026-11665
  * CVE-2026-11666
  * CVE-2026-11667
  * CVE-2026-11668
  * CVE-2026-11669
  * CVE-2026-11670
  * CVE-2026-11671
  * CVE-2026-11672
  * CVE-2026-11673
  * CVE-2026-11674
  * CVE-2026-11675
  * CVE-2026-11676
  * CVE-2026-11677
  * CVE-2026-11678
  * CVE-2026-11679
  * CVE-2026-11680
  * CVE-2026-11681
  * CVE-2026-11682
  * CVE-2026-11683
  * CVE-2026-11684
  * CVE-2026-11685
  * CVE-2026-11686
  * CVE-2026-11687
  * CVE-2026-11688
  * CVE-2026-11689
  * CVE-2026-11690
  * CVE-2026-11691
  * CVE-2026-11692
  * CVE-2026-11693
  * CVE-2026-11694
  * CVE-2026-11695
  * CVE-2026-11696
  * CVE-2026-11697
  * CVE-2026-11698
  * CVE-2026-11699
  * CVE-2026-11700
  * CVE-2026-11701



Affected Products:

         openSUSE Leap 16.0

-------------------------------------------------------------

An update that solves 74 vulnerabilities and has one bug fix can now be installed.

Description:

This update for chromium fixes the following issues:

Changes in chromium:

- Chromium 149.0.7827.102 (boo#1267911):
  * CVE-2026-11628: Use after free in Ozone
  * CVE-2026-11629: Use after free in Ozone
  * CVE-2026-11630: Use after free in File Input
  * CVE-2026-11631: Use after free in Aura
  * CVE-2026-11632: Use after free in TabStrip
  * CVE-2026-11633: Use after free in Bluetooth
  * CVE-2026-11634: Use after free in Gamepad
  * CVE-2026-11635: Use after free in Bluetooth
  * CVE-2026-11636: Use after free in Autofill
  * CVE-2026-11637: Use after free in Views
  * CVE-2026-11638: Use after free in Printing
  * CVE-2026-11639: Use after free in Compositing
  * CVE-2026-11640: Integer overflow in libyuv
  * CVE-2026-11641: Use after free in Bluetooth
  * CVE-2026-11642: Use after free in Web Apps
  * CVE-2026-11643: Use after free in Proxy
  * CVE-2026-11644: Use after free in Views
  * CVE-2026-11645: Out of bounds memory access in V8
  * CVE-2026-11646: Use after free in ViewTransitions
  * CVE-2026-11647: Use after free in Printing
  * CVE-2026-11648: Use after free in FullScreen
  * CVE-2026-11649: Use after free in V8
  * CVE-2026-11650: Use after free in V8
  * CVE-2026-11651: Use after free in Network
  * CVE-2026-11652: Use after free in Extensions
  * CVE-2026-11653: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11654: Use after free in CameraCapture
  * CVE-2026-11655: Integer overflow in Media
  * CVE-2026-11656: Use after free in ServiceWorker
  * CVE-2026-11657: Use after free in Payments
  * CVE-2026-11658: Insufficient validation of untrusted input in Extensions
  * CVE-2026-11659: Insufficient validation of untrusted input in UI
  * CVE-2026-11660: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11661: Use after free in Views
  * CVE-2026-11662: Type Confusion in Bindings
  * CVE-2026-11663: Use after free in Skia
  * CVE-2026-11664: Use after free in Payments
  * CVE-2026-11665: Out of bounds read in Dawn
  * CVE-2026-11666: Insufficient validation of untrusted input in Input
  * CVE-2026-11667: Out of bounds read in WebRTC
  * CVE-2026-11668: Uninitialized Use in Codecs
  * CVE-2026-11669: Integer overflow in Media
  * CVE-2026-11670: Use after free in PDF
  * CVE-2026-11671: Use after free in Navigation
  * CVE-2026-11672: Out of bounds write in GPU
  * CVE-2026-11673: Use after free in InterestGroups
  * CVE-2026-11674: Use after free in Guest View
  * CVE-2026-11675: Insufficient validation of untrusted input in Skia
  * CVE-2026-11676: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11677: Race in Network
  * CVE-2026-11678: Integer overflow in libyuv
  * CVE-2026-11679: Use after free in Codecs
  * CVE-2026-11680: Use after free in Media
  * CVE-2026-11681: Use after free in Ozone
  * CVE-2026-11682: Insufficient validation of untrusted input in Views
  * CVE-2026-11683: Use after free in WebCodecs
  * CVE-2026-11684: Insufficient policy enforcement in Network
  * CVE-2026-11685: Insufficient data validation in MediaCapture
  * CVE-2026-11686: Insufficient validation of untrusted input in Dawn
  * CVE-2026-11687: Use after free in Dawn
  * CVE-2026-11688: Object lifecycle issue in SVG
  * CVE-2026-11689: Insufficient validation of untrusted input in Passwords
  * CVE-2026-11690: Out of bounds read and write in Media
  * CVE-2026-11691: Insufficient validation of untrusted input in New Tab Page
  * CVE-2026-11692: Use after free in Read Anything
  * CVE-2026-11693: Inappropriate implementation in Plugins
  * CVE-2026-11694: Use after free in ServiceWorker
  * CVE-2026-11695: Inappropriate implementation in Passwords
  * CVE-2026-11696: Uninitialized Use in Video
  * CVE-2026-11697: Insufficient validation of untrusted input in UI
  * CVE-2026-11698: Use after free in Bluetooth
  * CVE-2026-11699: Use after free in Bluetooth
  * CVE-2026-11700: Use after free in Tracing
  * CVE-2026-11701: Insufficient validation of untrusted input in Guest View


Patch instructions:

   To install this openSUSE security update use the suse recommended installation methods
   like YaST online_update or "zypper patch".
   Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

   zypper in -t patch openSUSE-Leap-16.0-packagehub-312=1

Package List:

- openSUSE Leap 16.0:

  chromedriver-149.0.7827.102-bp160.1.1
  chromium-149.0.7827.102-bp160.1.1

References:

  * https://www.suse.com/security/cve/CVE-2026-11628.html
  * https://www.suse.com/security/cve/CVE-2026-11629.html
  * https://www.suse.com/security/cve/CVE-2026-11630.html
  * https://www.suse.com/security/cve/CVE-2026-11631.html
  * https://www.suse.com/security/cve/CVE-2026-11632.html
  * https://www.suse.com/security/cve/CVE-2026-11633.html
  * https://www.suse.com/security/cve/CVE-2026-11634.html
  * https://www.suse.com/security/cve/CVE-2026-11635.html
  * https://www.suse.com/security/cve/CVE-2026-11636.html
  * https://www.suse.com/security/cve/CVE-2026-11637.html
  * https://www.suse.com/security/cve/CVE-2026-11638.html
  * https://www.suse.com/security/cve/CVE-2026-11639.html
  * https://www.suse.com/security/cve/CVE-2026-11640.html
  * https://www.suse.com/security/cve/CVE-2026-11641.html
  * https://www.suse.com/security/cve/CVE-2026-11642.html
  * https://www.suse.com/security/cve/CVE-2026-11643.html
  * https://www.suse.com/security/cve/CVE-2026-11644.html
  * https://www.suse.com/security/cve/CVE-2026-11645.html
  * https://www.suse.com/security/cve/CVE-2026-11646.html
  * https://www.suse.com/security/cve/CVE-2026-11647.html
  * https://www.suse.com/security/cve/CVE-2026-11648.html
  * https://www.suse.com/security/cve/CVE-2026-11649.html
  * https://www.suse.com/security/cve/CVE-2026-11650.html
  * https://www.suse.com/security/cve/CVE-2026-11651.html
  * https://www.suse.com/security/cve/CVE-2026-11652.html
  * https://www.suse.com/security/cve/CVE-2026-11653.html
  * https://www.suse.com/security/cve/CVE-2026-11654.html
  * https://www.suse.com/security/cve/CVE-2026-11655.html
  * https://www.suse.com/security/cve/CVE-2026-11656.html
  * https://www.suse.com/security/cve/CVE-2026-11657.html
  * https://www.suse.com/security/cve/CVE-2026-11658.html
  * https://www.suse.com/security/cve/CVE-2026-11659.html
  * https://www.suse.com/security/cve/CVE-2026-11660.html
  * https://www.suse.com/security/cve/CVE-2026-11661.html
  * https://www.suse.com/security/cve/CVE-2026-11662.html
  * https://www.suse.com/security/cve/CVE-2026-11663.html
  * https://www.suse.com/security/cve/CVE-2026-11664.html
  * https://www.suse.com/security/cve/CVE-2026-11665.html
  * https://www.suse.com/security/cve/CVE-2026-11666.html
  * https://www.suse.com/security/cve/CVE-2026-11667.html
  * https://www.suse.com/security/cve/CVE-2026-11668.html
  * https://www.suse.com/security/cve/CVE-2026-11669.html
  * https://www.suse.com/security/cve/CVE-2026-11670.html
  * https://www.suse.com/security/cve/CVE-2026-11671.html
  * https://www.suse.com/security/cve/CVE-2026-11672.html
  * https://www.suse.com/security/cve/CVE-2026-11673.html
  * https://www.suse.com/security/cve/CVE-2026-11674.html
  * https://www.suse.com/security/cve/CVE-2026-11675.html
  * https://www.suse.com/security/cve/CVE-2026-11676.html
  * https://www.suse.com/security/cve/CVE-2026-11677.html
  * https://www.suse.com/security/cve/CVE-2026-11678.html
  * https://www.suse.com/security/cve/CVE-2026-11679.html
  * https://www.suse.com/security/cve/CVE-2026-11680.html
  * https://www.suse.com/security/cve/CVE-2026-11681.html
  * https://www.suse.com/security/cve/CVE-2026-11682.html
  * https://www.suse.com/security/cve/CVE-2026-11683.html
  * https://www.suse.com/security/cve/CVE-2026-11684.html
  * https://www.suse.com/security/cve/CVE-2026-11685.html
  * https://www.suse.com/security/cve/CVE-2026-11686.html
  * https://www.suse.com/security/cve/CVE-2026-11687.html
  * https://www.suse.com/security/cve/CVE-2026-11688.html
  * https://www.suse.com/security/cve/CVE-2026-11689.html
  * https://www.suse.com/security/cve/CVE-2026-11690.html
  * https://www.suse.com/security/cve/CVE-2026-11691.html
  * https://www.suse.com/security/cve/CVE-2026-11692.html
  * https://www.suse.com/security/cve/CVE-2026-11693.html
  * https://www.suse.com/security/cve/CVE-2026-11694.html
  * https://www.suse.com/security/cve/CVE-2026-11695.html
  * https://www.suse.com/security/cve/CVE-2026-11696.html
  * https://www.suse.com/security/cve/CVE-2026-11697.html
  * https://www.suse.com/security/cve/CVE-2026-11698.html
  * https://www.suse.com/security/cve/CVE-2026-11699.html
  * https://www.suse.com/security/cve/CVE-2026-11700.html
  * https://www.suse.com/security/cve/CVE-2026-11701.html
to post comments


Copyright © 2026, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds