SUSE alert openSUSE-SU-2026:21987-1 (chromium)
| From: | null@suse.de | |
| To: | security-announce@lists.opensuse.org | |
| Subject: | openSUSE-SU-2026:21987-1: important: Security update for chromium | |
| Date: | Thu, 01 Oct 2026 17:55:38 +0200 | |
| Message-ID: | <20261001155538.CFD62FCFE@maintenance.suse.de> | |
| Archive-link: | Article |
openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21987-1 Rating: important References: * bsc#1282334 Cross-References: * CVE-2026-95274 * CVE-2026-95275 * CVE-2026-95276 * CVE-2026-95277 * CVE-2026-95278 * CVE-2026-95279 * CVE-2026-95280 * CVE-2026-95281 * CVE-2026-95282 * CVE-2026-95283 * CVE-2026-95284 * CVE-2026-95285 * CVE-2026-95286 * CVE-2026-95287 * CVE-2026-95288 * CVE-2026-95289 * CVE-2026-95290 * CVE-2026-95291 * CVE-2026-95292 * CVE-2026-95293 * CVE-2026-95294 * CVE-2026-95295 * CVE-2026-95296 * CVE-2026-95297 * CVE-2026-95298 * CVE-2026-95299 * CVE-2026-95300 * CVE-2026-95301 * CVE-2026-95302 * CVE-2026-95303 * CVE-2026-95304 * CVE-2026-95305 * CVE-2026-95306 * CVE-2026-95307 * CVE-2026-95308 * CVE-2026-95309 * CVE-2026-95310 * CVE-2026-95311 * CVE-2026-95312 * CVE-2026-95313 * CVE-2026-95314 * CVE-2026-95315 * CVE-2026-95316 * CVE-2026-95317 * CVE-2026-95318 * CVE-2026-95319 * CVE-2026-95320 * CVE-2026-95321 * CVE-2026-95322 * CVE-2026-95323 * CVE-2026-95324 * CVE-2026-95325 * CVE-2026-95326 * CVE-2026-95327 * CVE-2026-95328 * CVE-2026-95329 * CVE-2026-95330 * CVE-2026-95331 * CVE-2026-95332 * CVE-2026-95333 * CVE-2026-95334 * CVE-2026-95335 * CVE-2026-95336 * CVE-2026-95337 * CVE-2026-95338 * CVE-2026-95339 * CVE-2026-95340 * CVE-2026-95341 * CVE-2026-95342 * CVE-2026-95343 * CVE-2026-95344 * CVE-2026-95345 * CVE-2026-95346 * CVE-2026-95347 * CVE-2026-95348 * CVE-2026-95349 * CVE-2026-95350 * CVE-2026-95351 * CVE-2026-95352 * CVE-2026-95353 * CVE-2026-95354 * CVE-2026-95355 * CVE-2026-95356 * CVE-2026-95357 * CVE-2026-95358 * CVE-2026-95359 * CVE-2026-95360 * CVE-2026-95361 * CVE-2026-95362 * CVE-2026-95363 * CVE-2026-95364 * CVE-2026-95365 * CVE-2026-95366 * CVE-2026-95367 * CVE-2026-95368 * CVE-2026-95369 * CVE-2026-95370 * CVE-2026-95371 * CVE-2026-95372 * CVE-2026-95373 * CVE-2026-95374 * CVE-2026-95375 * CVE-2026-95376 * CVE-2026-95380 * CVE-2026-95381 * CVE-2026-95382 * CVE-2026-95384 * CVE-2026-95385 Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves 108 vulnerabilities and has one bug fix can now be installed. Description: This update for chromium fixes the following issues: Changes in chromium: - Chromium 154.0.8037.57 (boo#1282334): * CVE-2026-95350: Buffer overflow in ANGLE * CVE-2026-95357: Out of bounds write in GPU * CVE-2026-95339: Use after free in ServiceWorker * CVE-2026-95281: Buffer overflow in ANGLE * CVE-2026-95313: Use after free in Fullscreen * CVE-2026-95349: Buffer overflow in WebGL * CVE-2026-95284: Buffer overflow in ANGLE * CVE-2026-95322: Out of bounds write in GPU * CVE-2026-95329: Out of bounds write in WebGL * CVE-2026-95356: Use after free in WindowDialog * CVE-2026-95310: Use after free in AdFilter * CVE-2026-95301: Missing authorization in Extensions * CVE-2026-95291: UI misrepresentation in SecurityIndicators * CVE-2026-95355: Incorrect authorization in Navigation * CVE-2026-95315: Use after free in Aura * CVE-2026-95298: Use after free in Browser * CVE-2026-95372: Use after free in Chromecast * CVE-2026-95324: Uninitialized resource in GPU * CVE-2026-95283: Buffer overflow in Tint * CVE-2026-95293: Uninitialized resource in GPU * CVE-2026-95274: Improper output encoding in DevTools * CVE-2026-95282: Use after free in Platform * CVE-2026-95373: Use after free in DevTools * CVE-2026-95277: Use after free in Views * CVE-2026-95348: Use after free in Bluetooth * CVE-2026-95335: Use after free in HID * CVE-2026-95338: Use after free in PDFium * CVE-2026-95318: Buffer overflow in Video * CVE-2026-95286: Type confusion in Bindings * CVE-2026-95365: Type confusion in IndexedDB * CVE-2026-95343: Use after free in WebAudio * CVE-2026-95280: Race condition in V8 * CVE-2026-95304: Out of bounds write in V8 * CVE-2026-95306: Type confusion in V8 * CVE-2026-95299: Use after free in GPU * CVE-2026-95351: Use after free in Views * CVE-2026-95287: Missing authorization in Navigation * CVE-2026-95366: Use of released resource in Core * CVE-2026-95382: Improper input validation in Auth * CVE-2026-95381: Improper input validation in Printing * CVE-2026-95331: Out of bounds write in ANGLE * CVE-2026-95297: Missing authorization in Contextual Tasks * CVE-2026-95375: Incorrect authorization in BrowserTag * CVE-2026-95302: Incorrect authorization in WebAPKs * CVE-2026-95362: Cross-site request forgery in DevTools * CVE-2026-95369: Inappropriate implementation in XML * CVE-2026-95376: Externally controlled reference in DevTools * CVE-2026-95359: Uninitialized resource in GPU * CVE-2026-95294: UI misrepresentation in Browser * CVE-2026-95337: UI misrepresentation in Messages * CVE-2026-95346: UI misrepresentation in Chromoting * CVE-2026-95320: Missing authorization in Navigation * CVE-2026-95317: Incorrect authorization in MediaCapture * CVE-2026-95345: Use after free in Actor * CVE-2026-95330: Improper state validation in Downloads * CVE-2026-95370: Inappropriate implementation in NFC * CVE-2026-95303: Incomplete cleanup in SmartCard * CVE-2026-95360: Race condition in Editing * CVE-2026-95295: Information leak in Mobile * CVE-2026-95276: Improper input validation in Themes * CVE-2026-95314: Incorrect authorization in HID * CVE-2026-95371: Missing authorization in Views * CVE-2026-95353: Use after free in Bindings * CVE-2026-95363: UI misrepresentation in FileSystem * CVE-2026-95341: Improper input validation in Desktop * CVE-2026-95354: Use after free in Verifier * CVE-2026-95384: Race condition in Transactions Platform * CVE-2026-95336: Information leak in Transactions Platform * CVE-2026-95290: Missing authorization in NFC * CVE-2026-95325: Use after free in ANGLE * CVE-2026-95275: Incorrect reference resolution in MediaStream * CVE-2026-95374: Incorrect authorization in Network * CVE-2026-95300: Missing authorization in DevTools * CVE-2026-95321: UI misrepresentation in Payments * CVE-2026-95323: UI misrepresentation in Chromium * CVE-2026-95332: Use of uninitialized variable in Tint * CVE-2026-95312: Information leak in Passwords * CVE-2026-95344: Race condition in DevTools * CVE-2026-95289: Incorrect authorization in Scroll * CVE-2026-95347: Use after free in Updater * CVE-2026-95311: Free of non-heap memory in Fonts * CVE-2026-95358: Incorrect authorization in Mobile * CVE-2026-95333: Use after free in Metrics * CVE-2026-95307: UI misrepresentation in ExtensionsMenu * CVE-2026-95285: Missing authorization in WebView * CVE-2026-95278: Missing authorization in WakeLock * CVE-2026-95327: Information leak in Networking * CVE-2026-95334: Incorrect reference resolution in WebProtect * CVE-2026-95308: Integer overflow in Metrics * CVE-2026-95292: Incorrect authorization in Safebrowsing * CVE-2026-95352: Incorrect authorization in DevTools * CVE-2026-95279: UI misrepresentation in Omnibox * CVE-2026-95367: Information leak in DataTransfer * CVE-2026-95385: Inappropriate implementation in PlatformIntegration * CVE-2026-95368: Incorrect authorization in DevTools * CVE-2026-95319: Use after free in Printing * CVE-2026-95326: Incomplete cleanup in Bluetooth * CVE-2026-95309: UI misrepresentation in Mobile * CVE-2026-95361: Confused deputy in DevTools * CVE-2026-95288: UI misrepresentation in Mobile * CVE-2026-95380: Type confusion in V8 * CVE-2026-95342: Missing authorization in V8 * CVE-2026-95296: Missing authorization in Core * CVE-2026-95316: Unchecked return value in Performance * CVE-2026-95328: Confused deputy in Mobile * CVE-2026-95340: Incorrect authorization in PictureInPicture * CVE-2026-95364: Improper input validation in Passwords * CVE-2026-95305: UI misrepresentation in Chromoting Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-packagehub-629=1 Package List: - openSUSE Leap 16.0: chromedriver-154.0.8037.57-bp160.1.1 chromium-154.0.8037.57-bp160.1.1 References: * https://www.suse.com/security/cve/CVE-2026-95274.html * https://www.suse.com/security/cve/CVE-2026-95275.html * https://www.suse.com/security/cve/CVE-2026-95276.html * https://www.suse.com/security/cve/CVE-2026-95277.html * https://www.suse.com/security/cve/CVE-2026-95278.html * https://www.suse.com/security/cve/CVE-2026-95279.html * https://www.suse.com/security/cve/CVE-2026-95280.html * https://www.suse.com/security/cve/CVE-2026-95281.html * https://www.suse.com/security/cve/CVE-2026-95282.html * https://www.suse.com/security/cve/CVE-2026-95283.html * https://www.suse.com/security/cve/CVE-2026-95284.html * https://www.suse.com/security/cve/CVE-2026-95285.html * https://www.suse.com/security/cve/CVE-2026-95286.html * https://www.suse.com/security/cve/CVE-2026-95287.html * https://www.suse.com/security/cve/CVE-2026-95288.html * https://www.suse.com/security/cve/CVE-2026-95289.html * https://www.suse.com/security/cve/CVE-2026-95290.html * https://www.suse.com/security/cve/CVE-2026-95291.html * https://www.suse.com/security/cve/CVE-2026-95292.html * https://www.suse.com/security/cve/CVE-2026-95293.html * https://www.suse.com/security/cve/CVE-2026-95294.html * https://www.suse.com/security/cve/CVE-2026-95295.html * https://www.suse.com/security/cve/CVE-2026-95296.html * https://www.suse.com/security/cve/CVE-2026-95297.html * https://www.suse.com/security/cve/CVE-2026-95298.html * https://www.suse.com/security/cve/CVE-2026-95299.html * https://www.suse.com/security/cve/CVE-2026-95300.html * https://www.suse.com/security/cve/CVE-2026-95301.html * https://www.suse.com/security/cve/CVE-2026-95302.html * https://www.suse.com/security/cve/CVE-2026-95303.html * https://www.suse.com/security/cve/CVE-2026-95304.html * https://www.suse.com/security/cve/CVE-2026-95305.html * https://www.suse.com/security/cve/CVE-2026-95306.html * https://www.suse.com/security/cve/CVE-2026-95307.html * https://www.suse.com/security/cve/CVE-2026-95308.html * https://www.suse.com/security/cve/CVE-2026-95309.html * https://www.suse.com/security/cve/CVE-2026-95310.html * https://www.suse.com/security/cve/CVE-2026-95311.html * https://www.suse.com/security/cve/CVE-2026-95312.html * https://www.suse.com/security/cve/CVE-2026-95313.html * https://www.suse.com/security/cve/CVE-2026-95314.html * https://www.suse.com/security/cve/CVE-2026-95315.html * https://www.suse.com/security/cve/CVE-2026-95316.html * https://www.suse.com/security/cve/CVE-2026-95317.html * https://www.suse.com/security/cve/CVE-2026-95318.html * https://www.suse.com/security/cve/CVE-2026-95319.html * https://www.suse.com/security/cve/CVE-2026-95320.html * https://www.suse.com/security/cve/CVE-2026-95321.html * https://www.suse.com/security/cve/CVE-2026-95322.html * https://www.suse.com/security/cve/CVE-2026-95323.html * https://www.suse.com/security/cve/CVE-2026-95324.html * https://www.suse.com/security/cve/CVE-2026-95325.html * https://www.suse.com/security/cve/CVE-2026-95326.html * https://www.suse.com/security/cve/CVE-2026-95327.html * https://www.suse.com/security/cve/CVE-2026-95328.html * https://www.suse.com/security/cve/CVE-2026-95329.html * https://www.suse.com/security/cve/CVE-2026-95330.html * https://www.suse.com/security/cve/CVE-2026-95331.html * https://www.suse.com/security/cve/CVE-2026-95332.html * https://www.suse.com/security/cve/CVE-2026-95333.html * https://www.suse.com/security/cve/CVE-2026-95334.html * https://www.suse.com/security/cve/CVE-2026-95335.html * https://www.suse.com/security/cve/CVE-2026-95336.html * https://www.suse.com/security/cve/CVE-2026-95337.html * https://www.suse.com/security/cve/CVE-2026-95338.html * https://www.suse.com/security/cve/CVE-2026-95339.html * https://www.suse.com/security/cve/CVE-2026-95340.html * https://www.suse.com/security/cve/CVE-2026-95341.html * https://www.suse.com/security/cve/CVE-2026-95342.html * https://www.suse.com/security/cve/CVE-2026-95343.html * https://www.suse.com/security/cve/CVE-2026-95344.html * https://www.suse.com/security/cve/CVE-2026-95345.html * https://www.suse.com/security/cve/CVE-2026-95346.html * https://www.suse.com/security/cve/CVE-2026-95347.html * https://www.suse.com/security/cve/CVE-2026-95348.html * https://www.suse.com/security/cve/CVE-2026-95349.html * https://www.suse.com/security/cve/CVE-2026-95350.html * https://www.suse.com/security/cve/CVE-2026-95351.html * https://www.suse.com/security/cve/CVE-2026-95352.html * https://www.suse.com/security/cve/CVE-2026-95353.html * https://www.suse.com/security/cve/CVE-2026-95354.html * https://www.suse.com/security/cve/CVE-2026-95355.html * https://www.suse.com/security/cve/CVE-2026-95356.html * https://www.suse.com/security/cve/CVE-2026-95357.html * https://www.suse.com/security/cve/CVE-2026-95358.html * https://www.suse.com/security/cve/CVE-2026-95359.html * https://www.suse.com/security/cve/CVE-2026-95360.html * https://www.suse.com/security/cve/CVE-2026-95361.html * https://www.suse.com/security/cve/CVE-2026-95362.html * https://www.suse.com/security/cve/CVE-2026-95363.html * https://www.suse.com/security/cve/CVE-2026-95364.html * https://www.suse.com/security/cve/CVE-2026-95365.html * https://www.suse.com/security/cve/CVE-2026-95366.html * https://www.suse.com/security/cve/CVE-2026-95367.html * https://www.suse.com/security/cve/CVE-2026-95368.html * https://www.suse.com/security/cve/CVE-2026-95369.html * https://www.suse.com/security/cve/CVE-2026-95370.html * https://www.suse.com/security/cve/CVE-2026-95371.html * https://www.suse.com/security/cve/CVE-2026-95372.html * https://www.suse.com/security/cve/CVE-2026-95373.html * https://www.suse.com/security/cve/CVE-2026-95374.html * https://www.suse.com/security/cve/CVE-2026-95375.html * https://www.suse.com/security/cve/CVE-2026-95376.html * https://www.suse.com/security/cve/CVE-2026-95380.html * https://www.suse.com/security/cve/CVE-2026-95381.html * https://www.suse.com/security/cve/CVE-2026-95382.html * https://www.suse.com/security/cve/CVE-2026-95384.html * https://www.suse.com/security/cve/CVE-2026-95385.html