Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 547
Alerts This Week
Warning Icon 1 547

openSUSE: 2023:0429-1 Critical: Chromium Vulnerabilities Remediation

opensuse
Calendar Grey May 4, 2016
Dist Opensuse Esm H88
A new Chromium update has been released, effectively fixing numerous security vulnerabilities in openSUSE. This critical patch is essential for users to maintain system integrity.
An update that fixes 7 vulnerabilities is now available.

Description

Chromium was updated to 50.0.2661.94 to fix a number of vulnerabilities

(boo#977830):

- CVE-2016-1660: Out-of-bounds write in Blink

- CVE-2016-1661: Memory corruption in cross-process frames

- CVE-2016-1662: Use-after-free in extensions

- CVE-2016-1663: Use-after-free in Blink’s V8 bindings

- CVE-2016-1664: Address bar spoofing

- CVE-2016-1665: Information leak in V8

- CVE-2016-1666: Various fixes from internal audits, fuzzing and other

initiatives

Topics%20covered

Topics Covered

security advisory memory corruption security fix important out-of-bounds openSUSE Chromium

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE Leap 42.1:

zypper in -t patch openSUSE-2016-539=1

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE Leap 42.1 (x86_64):

chromedriver-50.0.2661.94-45.1

chromedriver-debuginfo-50.0.2661.94-45.1

chromium-50.0.2661.94-45.1

chromium-debuginfo-50.0.2661.94-45.1

chromium-debugsource-50.0.2661.94-45.1

chromium-desktop-gnome-50.0.2661.94-45.1

chromium-desktop-kde-50.0.2661.94-45.1

chromium-ffmpegsumo-50.0.2661.94-45.1

chromium-ffmpegsumo-debuginfo-50.0.2661.94-45.1

References

https://www.suse.com/security/cve/CVE-2016-1660.html

https://www.suse.com/security/cve/CVE-2016-1661.html

https://www.suse.com/security/cve/CVE-2016-1662.html

https://www.suse.com/security/cve/CVE-2016-1663.html

https://www.suse.com/security/cve/CVE-2016-1664.html

https://www.suse.com/security/cve/CVE-2016-1665.html

https://www.suse.com/security/cve/CVE-2016-1666.html

https://bugzilla.suse.com/977830

--

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2016:1208-1
Rating: important
Affected Products: openSUSE Leap 42.1

Topics%20covered

Topics Covered

security advisory memory corruption security fix important out-of-bounds openSUSE Chromium

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.