openSUSE-SU-2020:1715-1

See a problem?

Import Source

https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2020:1715-1.json

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2020:1715-1

Related

Published

2020-10-23T12:21:50Z

Modified

2020-10-23T12:21:50Z

Summary

Security update for chromium

Details

This update for chromium fixes the following issues:

-chromium was updated to 86.0.4240.75 (boo#1177408): - CVE-2020-15967: Fixed Use after free in payments. - CVE-2020-15968: Fixed Use after free in Blink. - CVE-2020-15969: Fixed Use after free in WebRTC. - CVE-2020-15970: Fixed Use after free in NFC. - CVE-2020-15971: Fixed Use after free in printing. - CVE-2020-15972: Fixed Use after free in audio. - CVE-2020-15990: Fixed Use after free in autofill. - CVE-2020-15991: Fixed Use after free in password manager. - CVE-2020-15973: Fixed Insufficient policy enforcement in extensions. - CVE-2020-15974: Fixed Integer overflow in Blink. - CVE-2020-15975: Fixed Integer overflow in SwiftShader. - CVE-2020-15976: Fixed Use after free in WebXR. - CVE-2020-6557: Fixed Inappropriate implementation in networking. - CVE-2020-15977: Fixed Insufficient data validation in dialogs. - CVE-2020-15978: Fixed Insufficient data validation in navigation. - CVE-2020-15979: Fixed Inappropriate implementation in V8. - CVE-2020-15980: Fixed Insufficient policy enforcement in Intents. - CVE-2020-15981: Fixed Out of bounds read in audio. - CVE-2020-15982: Fixed Side-channel information leakage in cache. - CVE-2020-15983: Fixed Insufficient data validation in webUI. - CVE-2020-15984: Fixed Insufficient policy enforcement in Omnibox. - CVE-2020-15985: Fixed Inappropriate implementation in Blink. - CVE-2020-15986: Fixed Integer overflow in media. - CVE-2020-15987: Fixed Use after free in WebRTC. - CVE-2020-15992: Fixed Insufficient policy enforcement in networking. - CVE-2020-15988: Fixed Insufficient policy enforcement in downloads. - CVE-2020-15989: Fixed Uninitialized Use in PDFium.

This update was imported from the openSUSE:Leap:15.1:Update update project.

References

Affected packages

SUSE:Package Hub 15 SP1 / chromium

Package

Name: chromium
Purl: purl:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

86.0.4240.75-bp151.3.113.1

Ecosystem specific

{
    "binaries": [
        {
            "gn": "0.1807-bp151.3.6.1",
            "chromedriver": "86.0.4240.75-bp151.3.113.1",
            "chromium": "86.0.4240.75-bp151.3.113.1"
        }
    ]
}

SUSE:Package Hub 15 SP1 / gn

Package

Name: gn
Purl: purl:rpm/suse/gn&distro=SUSE%20Package%20Hub%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.1807-bp151.3.6.1

Ecosystem specific

{
    "binaries": [
        {
            "gn": "0.1807-bp151.3.6.1",
            "chromedriver": "86.0.4240.75-bp151.3.113.1",
            "chromium": "86.0.4240.75-bp151.3.113.1"
        }
    ]
}