openSUSE alert openSUSE-SU-2020:1937-1 (chromium)
| From: | opensuse-security@opensuse.org | |
| To: | opensuse-updates@opensuse.org | |
| Subject: | [opensuse-updates] openSUSE-SU-2020:1937-1: important: Security update for chromium | |
| Date: | Mon, 16 Nov 2020 00:16:15 +0100 | |
| Message-ID: | <20201115231615.3F528FFA2@maintenance.suse.de> | |
| Archive-link: | Article |
openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1937-1 Rating: important References: #1178375 Cross-References: CVE-2020-16004 CVE-2020-16005 CVE-2020-16006 CVE-2020-16007 CVE-2020-16008 CVE-2020-16009 CVE-2020-16011 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for chromium fixes the following issues: - Update to 86.0.4240.183 boo#1178375 - CVE-2020-16004: Use after free in user interface. - CVE-2020-16005: Insufficient policy enforcement in ANGLE. - CVE-2020-16006: Inappropriate implementation in V8 - CVE-2020-16007: Insufficient data validation in installer. - CVE-2020-16008: Stack buffer overflow in WebRTC. - CVE-2020-16009: Inappropriate implementation in V8. - CVE-2020-16011: Heap buffer overflow in UI on Windows. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1937=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-86.0.4240.183-bp151.3.125.1 chromium-86.0.4240.183-bp151.3.125.1 References: https://www.suse.com/security/cve/CVE-2020-16004.html https://www.suse.com/security/cve/CVE-2020-16005.html https://www.suse.com/security/cve/CVE-2020-16006.html https://www.suse.com/security/cve/CVE-2020-16007.html https://www.suse.com/security/cve/CVE-2020-16008.html https://www.suse.com/security/cve/CVE-2020-16009.html https://www.suse.com/security/cve/CVE-2020-16011.html https://bugzilla.suse.com/1178375 _______________________________________________ openSUSE Updates mailing list -- updates@lists.opensuse.org To unsubscribe, email updates-leave@lists.opensuse.org List Netiquette: https://en.opensuse.org/openSUSE:Mailing_list_netiquette List Archives: https://lists.opensuse.org/archives/list/updates@lists.op...