Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

openSUSE 13.1: 2014:0982-1 Important: Chromium Fix for Security Issues

opensuse
Calendar Grey August 11, 2014
Dist Opensuse Esm H88
Patch released for chromium security flaws in openSUSE. Upgrade to version 36.0.1985.125 boosts system performance.
An update that fixes 6 vulnerabilities is now available

Description

Chromium was updated to version 36.0.1985.125. New Functionality:

* Rich Notifications Improvements

* An Updated Incognito / Guest NTP design

* The addition of a Browser crash recovery bubble

* Chrome App Launcher for Linux

* Lots of under the hood changes for stability and performance

Security Fixes (bnc#887952,bnc#887955):

* CVE-2014-3160: Same-Origin-Policy bypass in SVG

* CVE-2014-3162: Various fixes from internal audits, fuzzing and other

initiatives and 24 more fixes for which no description was given.

Packaging changes:

* Switch to newer method to retrieve toolchain packages. Dropping the

three naclsdk_*tgz files. Everything is now included in the

toolchain_linux_x86.tar.bz2 tarball

* Add Courgette.tar.xz as that the build process now requires some files

from Courgette in order to build succesfully. This does not mean that

Courgette is build/delivered.

Includes also an update to Chromium 35.0.1916.153 Security...

Read the Full Advisory

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 13.1:

zypper in -t patch openSUSE-2014-483

- openSUSE 12.3:

zypper in -t patch openSUSE-2014-483

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 13.1 (i586 x86_64):

chromedriver-36.0.1985.125-41.1

chromedriver-debuginfo-36.0.1985.125-41.1

chromium-36.0.1985.125-41.1

chromium-debuginfo-36.0.1985.125-41.1

chromium-debugsource-36.0.1985.125-41.1

chromium-desktop-gnome-36.0.1985.125-41.1

chromium-desktop-kde-36.0.1985.125-41.1

chromium-ffmpegsumo-36.0.1985.125-41.1

chromium-ffmpegsumo-debuginfo-36.0.1985.125-41.1

chromium-suid-helper-36.0.1985.125-41.1

chromium-suid-helper-debuginfo-36.0.1985.125-41.1

- openSUSE 12.3 (i586 x86_64):

chromedriver-36.0.1985.125-1.50.1

chromedriver-debuginfo-36.0.1985.125-1.50.1

chromium-36.0.1985.125-1.50.1

chromium-debuginfo-36.0.1985.125-1.50.1

chromium-debugsource-36.0.1985.125-1.50.1

chromium-desktop-gnome-36.0.1985.125-1.50.1

chromium-desktop-kde-36.0.1985.125-1.50.1

chromium-ffmpegsumo-36.0.1985.125-1.50.1

chromium-ffmpegsumo-debuginfo-36.0.1985.125-1.50.1

chromium-suid-helper-36.0.1985.125-1.50.1

chromium-suid-helper-debuginfo-36.0.1985.125-1.50.1

References

https://www.suse.com/security/cve/CVE-2014-3154.html

https://www.suse.com/security/cve/CVE-2014-3155.html

https://www.suse.com/security/cve/CVE-2014-3156.html

https://www.suse.com/security/cve/CVE-2014-3157.html

https://www.suse.com/security/cve/CVE-2014-3160.html

https://www.suse.com/security/cve/CVE-2014-3162.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2014:0982-1
Rating: important
Affected Products: openSUSE 13.1 openSUSE 12.3 .

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here