Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

openSUSE 12.1: 2012:0466-1 Important Update for Chromium Security

opensuse
Calendar Grey April 4, 2012
Dist Opensuse Esm H88
openSUSE Release for Firefox and SpiderMonkey addresses 8 critical vulnerabilities and boosts online safety with this crucial update.
An update that fixes 9 vulnerabilities is now available.

Description

- Update to 19.0.1079 Security Fixes (bnc#754456):

* High CVE-2011-3050: Use-after-free with first-letter

handling

* High CVE-2011-3045: libpng integer issue from upstream

* High CVE-2011-3051: Use-after-free in CSS cross-fade

handling

* High CVE-2011-3052: Memory corruption in WebGL canvas

handling

* High CVE-2011-3053: Use-after-free in block splitting

* Low CVE-2011-3054: Apply additional isolations to

webui privileges

* Low CVE-2011-3055: Prompt in the browser native UI for

unpacked extension installation

* High CVE-2011-3056: Cross-origin violation with “magic

iframe”.

* Low CVE-2011-3049: Extension web request API can

interfere with system requests Other Fixes:

* The short-cut key for caps lock (Shift + Search) is

disabled when an accessibility screen reader is enabled

* Fixes an issue with files not being displayed in File

Manager when some file names contain UTF-8 characters (generally accented...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory update important web security openSUSE chromium v8

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 12.1:

zypper in -t patch openSUSE-2012-207

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 12.1 (i586 x86_64):

chromium-19.0.1079.0-1.14.1

chromium-debuginfo-19.0.1079.0-1.14.1

chromium-debugsource-19.0.1079.0-1.14.1

chromium-desktop-gnome-19.0.1079.0-1.14.1

chromium-desktop-kde-19.0.1079.0-1.14.1

chromium-suid-helper-19.0.1079.0-1.14.1

chromium-suid-helper-debuginfo-19.0.1079.0-1.14.1

libv8-3-3.9.24.1-1.18.1

libv8-3-debuginfo-3.9.24.1-1.18.1

v8-debugsource-3.9.24.1-1.18.1

v8-devel-3.9.24.1-1.18.1

v8-private-headers-devel-3.9.24.1-1.18.1

References

https://www.suse.com/security/cve/CVE-2011-3045.html

https://www.suse.com/security/cve/CVE-2011-3049.html

https://www.suse.com/security/cve/CVE-2011-3050.html

https://www.suse.com/security/cve/CVE-2011-3051.html

https://www.suse.com/security/cve/CVE-2011-3052.html

https://www.suse.com/security/cve/CVE-2011-3053.html

https://www.suse.com/security/cve/CVE-2011-3054.html

https://www.suse.com/security/cve/CVE-2011-3055.html

https://www.suse.com/security/cve/CVE-2011-3056.html

--

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2012:0466-1
Rating: important
Affected Products: openSUSE 12.1

Topics%20covered

Topics Covered

security advisory update important web security openSUSE chromium v8

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here