SUSE alert openSUSE-SU-2026:0343-1 (chromium)
| From: | maintenance@opensuse.org | |
| To: | security-announce@lists.opensuse.org | |
| Subject: | openSUSE-SU-2026:0343-1: important: Security update for chromium | |
| Date: | Thu, 01 Oct 2026 21:05:10 +0200 | |
| Message-ID: | <20261001190510.1BACEFD21@maintenance.suse.de> | |
| Archive-link: | Article |
openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2026:0343-1 Rating: important References: #1282334 Cross-References: CVE-2026-95274 CVE-2026-95275 CVE-2026-95276 CVE-2026-95277 CVE-2026-95278 CVE-2026-95279 CVE-2026-95280 CVE-2026-95281 CVE-2026-95282 CVE-2026-95283 CVE-2026-95284 CVE-2026-95285 CVE-2026-95286 CVE-2026-95287 CVE-2026-95288 CVE-2026-95289 CVE-2026-95290 CVE-2026-95291 CVE-2026-95292 CVE-2026-95293 CVE-2026-95294 CVE-2026-95295 CVE-2026-95296 CVE-2026-95297 CVE-2026-95298 CVE-2026-95299 CVE-2026-95300 CVE-2026-95301 CVE-2026-95302 CVE-2026-95303 CVE-2026-95304 CVE-2026-95305 CVE-2026-95306 CVE-2026-95307 CVE-2026-95308 CVE-2026-95309 CVE-2026-95310 CVE-2026-95311 CVE-2026-95312 CVE-2026-95313 CVE-2026-95314 CVE-2026-95315 CVE-2026-95316 CVE-2026-95317 CVE-2026-95318 CVE-2026-95319 CVE-2026-95320 CVE-2026-95321 CVE-2026-95322 CVE-2026-95323 CVE-2026-95324 CVE-2026-95325 CVE-2026-95326 CVE-2026-95327 CVE-2026-95328 CVE-2026-95329 CVE-2026-95330 CVE-2026-95331 CVE-2026-95332 CVE-2026-95333 CVE-2026-95334 CVE-2026-95335 CVE-2026-95336 CVE-2026-95337 CVE-2026-95338 CVE-2026-95339 CVE-2026-95340 CVE-2026-95341 CVE-2026-95342 CVE-2026-95343 CVE-2026-95344 CVE-2026-95345 CVE-2026-95346 CVE-2026-95347 CVE-2026-95348 CVE-2026-95349 CVE-2026-95350 CVE-2026-95351 CVE-2026-95352 CVE-2026-95353 CVE-2026-95354 CVE-2026-95355 CVE-2026-95356 CVE-2026-95357 CVE-2026-95358 CVE-2026-95359 CVE-2026-95360 CVE-2026-95361 CVE-2026-95362 CVE-2026-95363 CVE-2026-95364 CVE-2026-95365 CVE-2026-95366 CVE-2026-95367 CVE-2026-95368 CVE-2026-95369 CVE-2026-95370 CVE-2026-95371 CVE-2026-95372 CVE-2026-95373 CVE-2026-95374 CVE-2026-95375 CVE-2026-95376 CVE-2026-95380 CVE-2026-95381 CVE-2026-95382 CVE-2026-95384 CVE-2026-95385 Affected Products: openSUSE Backports SLE-15-SP7 ______________________________________________________________________________ An update that fixes 108 vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Chromium 154.0.8037.57 (boo#1282334): * CVE-2026-95350: Buffer overflow in ANGLE * CVE-2026-95357: Out of bounds write in GPU * CVE-2026-95339: Use after free in ServiceWorker * CVE-2026-95281: Buffer overflow in ANGLE * CVE-2026-95313: Use after free in Fullscreen * CVE-2026-95349: Buffer overflow in WebGL * CVE-2026-95284: Buffer overflow in ANGLE * CVE-2026-95322: Out of bounds write in GPU * CVE-2026-95329: Out of bounds write in WebGL * CVE-2026-95356: Use after free in WindowDialog * CVE-2026-95310: Use after free in AdFilter * CVE-2026-95301: Missing authorization in Extensions * CVE-2026-95291: UI misrepresentation in SecurityIndicators * CVE-2026-95355: Incorrect authorization in Navigation * CVE-2026-95315: Use after free in Aura * CVE-2026-95298: Use after free in Browser * CVE-2026-95372: Use after free in Chromecast * CVE-2026-95324: Uninitialized resource in GPU * CVE-2026-95283: Buffer overflow in Tint * CVE-2026-95293: Uninitialized resource in GPU * CVE-2026-95274: Improper output encoding in DevTools * CVE-2026-95282: Use after free in Platform * CVE-2026-95373: Use after free in DevTools * CVE-2026-95277: Use after free in Views * CVE-2026-95348: Use after free in Bluetooth * CVE-2026-95335: Use after free in HID * CVE-2026-95338: Use after free in PDFium * CVE-2026-95318: Buffer overflow in Video * CVE-2026-95286: Type confusion in Bindings * CVE-2026-95365: Type confusion in IndexedDB * CVE-2026-95343: Use after free in WebAudio * CVE-2026-95280: Race condition in V8 * CVE-2026-95304: Out of bounds write in V8 * CVE-2026-95306: Type confusion in V8 * CVE-2026-95299: Use after free in GPU * CVE-2026-95351: Use after free in Views * CVE-2026-95287: Missing authorization in Navigation * CVE-2026-95366: Use of released resource in Core * CVE-2026-95382: Improper input validation in Auth * CVE-2026-95381: Improper input validation in Printing * CVE-2026-95331: Out of bounds write in ANGLE * CVE-2026-95297: Missing authorization in Contextual Tasks * CVE-2026-95375: Incorrect authorization in BrowserTag * CVE-2026-95302: Incorrect authorization in WebAPKs * CVE-2026-95362: Cross-site request forgery in DevTools * CVE-2026-95369: Inappropriate implementation in XML * CVE-2026-95376: Externally controlled reference in DevTools * CVE-2026-95359: Uninitialized resource in GPU * CVE-2026-95294: UI misrepresentation in Browser * CVE-2026-95337: UI misrepresentation in Messages * CVE-2026-95346: UI misrepresentation in Chromoting * CVE-2026-95320: Missing authorization in Navigation * CVE-2026-95317: Incorrect authorization in MediaCapture * CVE-2026-95345: Use after free in Actor * CVE-2026-95330: Improper state validation in Downloads * CVE-2026-95370: Inappropriate implementation in NFC * CVE-2026-95303: Incomplete cleanup in SmartCard * CVE-2026-95360: Race condition in Editing * CVE-2026-95295: Information leak in Mobile * CVE-2026-95276: Improper input validation in Themes * CVE-2026-95314: Incorrect authorization in HID * CVE-2026-95371: Missing authorization in Views * CVE-2026-95353: Use after free in Bindings * CVE-2026-95363: UI misrepresentation in FileSystem * CVE-2026-95341: Improper input validation in Desktop * CVE-2026-95354: Use after free in Verifier * CVE-2026-95384: Race condition in Transactions Platform * CVE-2026-95336: Information leak in Transactions Platform * CVE-2026-95290: Missing authorization in NFC * CVE-2026-95325: Use after free in ANGLE * CVE-2026-95275: Incorrect reference resolution in MediaStream * CVE-2026-95374: Incorrect authorization in Network * CVE-2026-95300: Missing authorization in DevTools * CVE-2026-95321: UI misrepresentation in Payments * CVE-2026-95323: UI misrepresentation in Chromium * CVE-2026-95332: Use of uninitialized variable in Tint * CVE-2026-95312: Information leak in Passwords * CVE-2026-95344: Race condition in DevTools * CVE-2026-95289: Incorrect authorization in Scroll * CVE-2026-95347: Use after free in Updater * CVE-2026-95311: Free of non-heap memory in Fonts * CVE-2026-95358: Incorrect authorization in Mobile * CVE-2026-95333: Use after free in Metrics * CVE-2026-95307: UI misrepresentation in ExtensionsMenu * CVE-2026-95285: Missing authorization in WebView * CVE-2026-95278: Missing authorization in WakeLock * CVE-2026-95327: Information leak in Networking * CVE-2026-95334: Incorrect reference resolution in WebProtect * CVE-2026-95308: Integer overflow in Metrics * CVE-2026-95292: Incorrect authorization in Safebrowsing * CVE-2026-95352: Incorrect authorization in DevTools * CVE-2026-95279: UI misrepresentation in Omnibox * CVE-2026-95367: Information leak in DataTransfer * CVE-2026-95385: Inappropriate implementation in PlatformIntegration * CVE-2026-95368: Incorrect authorization in DevTools * CVE-2026-95319: Use after free in Printing * CVE-2026-95326: Incomplete cleanup in Bluetooth * CVE-2026-95309: UI misrepresentation in Mobile * CVE-2026-95361: Confused deputy in DevTools * CVE-2026-95288: UI misrepresentation in Mobile * CVE-2026-95380: Type confusion in V8 * CVE-2026-95342: Missing authorization in V8 * CVE-2026-95296: Missing authorization in Core * CVE-2026-95316: Unchecked return value in Performance * CVE-2026-95328: Confused deputy in Mobile * CVE-2026-95340: Incorrect authorization in PictureInPicture * CVE-2026-95364: Improper input validation in Passwords * CVE-2026-95305: UI misrepresentation in Chromoting - INSTALL.sh: also fix StartupWMClass in desktop file Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP7: zypper in -t patch openSUSE-2026-343=1 Package List: - openSUSE Backports SLE-15-SP7 (aarch64 ppc64le x86_64): chromedriver-154.0.8037.57-bp157.2.231.1 chromium-154.0.8037.57-bp157.2.231.1 References: https://www.suse.com/security/cve/CVE-2026-95274.html https://www.suse.com/security/cve/CVE-2026-95275.html https://www.suse.com/security/cve/CVE-2026-95276.html https://www.suse.com/security/cve/CVE-2026-95277.html https://www.suse.com/security/cve/CVE-2026-95278.html https://www.suse.com/security/cve/CVE-2026-95279.html https://www.suse.com/security/cve/CVE-2026-95280.html https://www.suse.com/security/cve/CVE-2026-95281.html https://www.suse.com/security/cve/CVE-2026-95282.html https://www.suse.com/security/cve/CVE-2026-95283.html https://www.suse.com/security/cve/CVE-2026-95284.html https://www.suse.com/security/cve/CVE-2026-95285.html https://www.suse.com/security/cve/CVE-2026-95286.html https://www.suse.com/security/cve/CVE-2026-95287.html https://www.suse.com/security/cve/CVE-2026-95288.html https://www.suse.com/security/cve/CVE-2026-95289.html https://www.suse.com/security/cve/CVE-2026-95290.html https://www.suse.com/security/cve/CVE-2026-95291.html https://www.suse.com/security/cve/CVE-2026-95292.html https://www.suse.com/security/cve/CVE-2026-95293.html https://www.suse.com/security/cve/CVE-2026-95294.html https://www.suse.com/security/cve/CVE-2026-95295.html https://www.suse.com/security/cve/CVE-2026-95296.html https://www.suse.com/security/cve/CVE-2026-95297.html https://www.suse.com/security/cve/CVE-2026-95298.html https://www.suse.com/security/cve/CVE-2026-95299.html https://www.suse.com/security/cve/CVE-2026-95300.html https://www.suse.com/security/cve/CVE-2026-95301.html https://www.suse.com/security/cve/CVE-2026-95302.html https://www.suse.com/security/cve/CVE-2026-95303.html https://www.suse.com/security/cve/CVE-2026-95304.html https://www.suse.com/security/cve/CVE-2026-95305.html https://www.suse.com/security/cve/CVE-2026-95306.html https://www.suse.com/security/cve/CVE-2026-95307.html https://www.suse.com/security/cve/CVE-2026-95308.html https://www.suse.com/security/cve/CVE-2026-95309.html https://www.suse.com/security/cve/CVE-2026-95310.html https://www.suse.com/security/cve/CVE-2026-95311.html https://www.suse.com/security/cve/CVE-2026-95312.html https://www.suse.com/security/cve/CVE-2026-95313.html https://www.suse.com/security/cve/CVE-2026-95314.html https://www.suse.com/security/cve/CVE-2026-95315.html https://www.suse.com/security/cve/CVE-2026-95316.html https://www.suse.com/security/cve/CVE-2026-95317.html https://www.suse.com/security/cve/CVE-2026-95318.html https://www.suse.com/security/cve/CVE-2026-95319.html https://www.suse.com/security/cve/CVE-2026-95320.html https://www.suse.com/security/cve/CVE-2026-95321.html https://www.suse.com/security/cve/CVE-2026-95322.html https://www.suse.com/security/cve/CVE-2026-95323.html https://www.suse.com/security/cve/CVE-2026-95324.html https://www.suse.com/security/cve/CVE-2026-95325.html https://www.suse.com/security/cve/CVE-2026-95326.html https://www.suse.com/security/cve/CVE-2026-95327.html https://www.suse.com/security/cve/CVE-2026-95328.html https://www.suse.com/security/cve/CVE-2026-95329.html https://www.suse.com/security/cve/CVE-2026-95330.html https://www.suse.com/security/cve/CVE-2026-95331.html https://www.suse.com/security/cve/CVE-2026-95332.html https://www.suse.com/security/cve/CVE-2026-95333.html https://www.suse.com/security/cve/CVE-2026-95334.html https://www.suse.com/security/cve/CVE-2026-95335.html https://www.suse.com/security/cve/CVE-2026-95336.html https://www.suse.com/security/cve/CVE-2026-95337.html https://www.suse.com/security/cve/CVE-2026-95338.html https://www.suse.com/security/cve/CVE-2026-95339.html https://www.suse.com/security/cve/CVE-2026-95340.html https://www.suse.com/security/cve/CVE-2026-95341.html https://www.suse.com/security/cve/CVE-2026-95342.html https://www.suse.com/security/cve/CVE-2026-95343.html https://www.suse.com/security/cve/CVE-2026-95344.html https://www.suse.com/security/cve/CVE-2026-95345.html https://www.suse.com/security/cve/CVE-2026-95346.html https://www.suse.com/security/cve/CVE-2026-95347.html https://www.suse.com/security/cve/CVE-2026-95348.html https://www.suse.com/security/cve/CVE-2026-95349.html https://www.suse.com/security/cve/CVE-2026-95350.html https://www.suse.com/security/cve/CVE-2026-95351.html https://www.suse.com/security/cve/CVE-2026-95352.html https://www.suse.com/security/cve/CVE-2026-95353.html https://www.suse.com/security/cve/CVE-2026-95354.html https://www.suse.com/security/cve/CVE-2026-95355.html https://www.suse.com/security/cve/CVE-2026-95356.html https://www.suse.com/security/cve/CVE-2026-95357.html https://www.suse.com/security/cve/CVE-2026-95358.html https://www.suse.com/security/cve/CVE-2026-95359.html https://www.suse.com/security/cve/CVE-2026-95360.html https://www.suse.com/security/cve/CVE-2026-95361.html https://www.suse.com/security/cve/CVE-2026-95362.html https://www.suse.com/security/cve/CVE-2026-95363.html https://www.suse.com/security/cve/CVE-2026-95364.html https://www.suse.com/security/cve/CVE-2026-95365.html https://www.suse.com/security/cve/CVE-2026-95366.html https://www.suse.com/security/cve/CVE-2026-95367.html https://www.suse.com/security/cve/CVE-2026-95368.html https://www.suse.com/security/cve/CVE-2026-95369.html https://www.suse.com/security/cve/CVE-2026-95370.html https://www.suse.com/security/cve/CVE-2026-95371.html https://www.suse.com/security/cve/CVE-2026-95372.html https://www.suse.com/security/cve/CVE-2026-95373.html https://www.suse.com/security/cve/CVE-2026-95374.html https://www.suse.com/security/cve/CVE-2026-95375.html https://www.suse.com/security/cve/CVE-2026-95376.html https://www.suse.com/security/cve/CVE-2026-95380.html https://www.suse.com/security/cve/CVE-2026-95381.html https://www.suse.com/security/cve/CVE-2026-95382.html https://www.suse.com/security/cve/CVE-2026-95384.html https://www.suse.com/security/cve/CVE-2026-95385.html https://bugzilla.suse.com/1282334