Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

openSUSE: 2022:3275-1 Critical: Firefox Security Update

opensuse
Calendar Grey November 2, 2015
Scroller Opensuse
openSUSE Security Patch for Firefox: addresses vulnerabilities related to cross-site scripting with critical alert.
An update that fixes two vulnerabilities is now available

Description

Chromium was updated to 45.0.2454.101 to fix two security issues.

The following vulnerabilities were fixed:

* CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]

* CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]

Topics%20covered

Topics Covered

security advisory important SUSE cross-origin chromium

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- SUSE Package Hub for SUSE Linux Enterprise 12:

zypper in -t patch openSUSE-2015-649=1

To bring your system up-to-date, use "zypper patch".

Package List

- SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64):

chromedriver-45.0.2454.101-24.1

chromedriver-debuginfo-45.0.2454.101-24.1

chromium-45.0.2454.101-24.1

chromium-debuginfo-45.0.2454.101-24.1

chromium-debugsource-45.0.2454.101-24.1

chromium-desktop-gnome-45.0.2454.101-24.1

chromium-desktop-kde-45.0.2454.101-24.1

chromium-ffmpegsumo-45.0.2454.101-24.1

chromium-ffmpegsumo-debuginfo-45.0.2454.101-24.1

References

https://www.suse.com/security/cve/CVE-2015-1303.html

https://www.suse.com/security/cve/CVE-2015-1304.html

https://bugzilla.suse.com/show_bug.cgi?id=947504

https://bugzilla.suse.com/show_bug.cgi?id=947507

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2015:1876-1
Rating: important
Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 .

Topics%20covered

Topics Covered

security advisory important SUSE cross-origin chromium

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.