Alerts This Week
Warning Icon 1 697
Alerts This Week
Warning Icon 1 697

openSUSE 13.2: 2015:0505-1 Important: Chromium Browser Security Fix

opensuse
Calendar Grey March 16, 2015
Dist Opensuse Esm H88
New update for Chromium 41.0.2272.76 released, resolving 20 security vulnerabilities in openSUSE environments. Update now to ensure safe web surfing.
An update that fixes 20 vulnerabilities is now available.

Description

Chromium was updated to 41.0.2272.76 (bnc#920825)

Security fixes:

* CVE-2015-1212: Out-of-bounds write in media

* CVE-2015-1213: Out-of-bounds write in skia filters * CVE-2015-1214: Out-of-bounds write in skia filters * CVE-2015-1215: Out-of-bounds write in skia filters * CVE-2015-1216: Use-after-free in v8 bindings

* CVE-2015-1217: Type confusion in v8 bindings

* CVE-2015-1218: Use-after-free in dom

* CVE-2015-1219: Integer overflow in webgl

* CVE-2015-1220: Use-after-free in gif decoder

* CVE-2015-1221: Use-after-free in web databases

* CVE-2015-1222: Use-after-free in service workers * CVE-2015-1223: Use-after-free in dom

* CVE-2015-1230: Type confusion in v8

* CVE-2015-1224: Out-of-bounds read in vpxdecoder

* CVE-2015-1225: Out-of-bounds read in pdfium

* CVE-2015-1226: Validation issue in debugger

* CVE-2015-1227: Uninitialized value in blink

* CVE-2015-1228: Uninitialized value in rendering

* CVE-2015-1229: Cookie...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory critical important browser security out-of-bounds openSUSE chromium

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 13.2:

zypper in -t patch openSUSE-2015-228=1

- openSUSE 13.1:

zypper in -t patch openSUSE-2015-228=1

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 13.2 (i586 x86_64):

chromedriver-41.0.2272.76-17.1

chromedriver-debuginfo-41.0.2272.76-17.1

chromium-41.0.2272.76-17.1

chromium-debuginfo-41.0.2272.76-17.1

chromium-debugsource-41.0.2272.76-17.1

chromium-desktop-gnome-41.0.2272.76-17.1

chromium-desktop-kde-41.0.2272.76-17.1

chromium-ffmpegsumo-41.0.2272.76-17.1

chromium-ffmpegsumo-debuginfo-41.0.2272.76-17.1

- openSUSE 13.1 (i586 x86_64):

chromedriver-41.0.2272.76-72.1

chromedriver-debuginfo-41.0.2272.76-72.1

chromium-41.0.2272.76-72.1

chromium-debuginfo-41.0.2272.76-72.1

chromium-debugsource-41.0.2272.76-72.1

chromium-desktop-gnome-41.0.2272.76-72.1

chromium-desktop-kde-41.0.2272.76-72.1

chromium-ffmpegsumo-41.0.2272.76-72.1

chromium-ffmpegsumo-debuginfo-41.0.2272.76-72.1

References

https://www.suse.com/security/cve/CVE-2015-1212.html

https://www.suse.com/security/cve/CVE-2015-1213.html

https://www.suse.com/security/cve/CVE-2015-1214.html

https://www.suse.com/security/cve/CVE-2015-1215.html

https://www.suse.com/security/cve/CVE-2015-1216.html

https://www.suse.com/security/cve/CVE-2015-1217.html

https://www.suse.com/security/cve/CVE-2015-1218.html

https://www.suse.com/security/cve/CVE-2015-1219.html

https://www.suse.com/security/cve/CVE-2015-1220.html

https://www.suse.com/security/cve/CVE-2015-1221.html

https://www.suse.com/security/cve/CVE-2015-1222.html

https://www.suse.com/security/cve/CVE-2015-1223.html

https://www.suse.com/security/cve/CVE-2015-1224.html

https://www.suse.com/security/cve/CVE-2015-1225.html

https://www.suse.com/security/cve/CVE-2015-1226.html

https://www.suse.com/security/cve/CVE-2015-1227.html

https://www.suse.com/security/cve/CVE-2015-1228.html

https://www.suse.com/security/cve/CVE-2015-1229.html

https://www.suse.com/security/cve/CVE-2015-1230.html

https://www....

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2015:0505-1
Rating: important
Affected Products: openSUSE 13.2 openSUSE 13.1

Topics%20covered

Topics Covered

security advisory critical important browser security out-of-bounds openSUSE chromium

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here