openSUSE 42.1 and 13.2 Security Update: Important Chromium Fixes
opensuse
May 16, 2016
An update that fixes four vulnerabilities is now available.
Description
Chromium was updated to 50.0.2661.102 to fix four vulnerabilities
(boo#979859):
- CVE-2016-1667: Same origin bypass in DOM
- CVE-2016-1668: Same origin bypass in Blink V8 bindings
- CVE-2016-1669: Buffer overflow in V8
- CVE-2016-1670: Race condition in loader
Patch
Patch Instructions:
To install this openSUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:
- openSUSE Leap 42.1:
zypper in -t patch openSUSE-2016-584=1
- openSUSE 13.2:
zypper in -t patch openSUSE-2016-584=1
To bring your system up-to-date, use "zypper patch".
Package List
- openSUSE Leap 42.1 (x86_64):
chromedriver-50.0.2661.102-48.1
chromedriver-debuginfo-50.0.2661.102-48.1
chromium-50.0.2661.102-48.1
chromium-debuginfo-50.0.2661.102-48.1
chromium-debugsource-50.0.2661.102-48.1
chromium-desktop-gnome-50.0.2661.102-48.1
chromium-desktop-kde-50.0.2661.102-48.1
chromium-ffmpegsumo-50.0.2661.102-48.1
chromium-ffmpegsumo-debuginfo-50.0.2661.102-48.1
- openSUSE 13.2 (i586 x86_64):
chromedriver-50.0.2661.102-100.1
chromedriver-debuginfo-50.0.2661.102-100.1
chromium-50.0.2661.102-100.1
chromium-debuginfo-50.0.2661.102-100.1
chromium-debugsource-50.0.2661.102-100.1
chromium-desktop-gnome-50.0.2661.102-100.1
chromium-desktop-kde-50.0.2661.102-100.1
chromium-ffmpegsumo-50.0.2661.102-100.1
chromium-ffmpegsumo-debuginfo-50.0.2661.102-100.1
References
https://www.suse.com/security/cve/CVE-2016-1667.html
https://www.suse.com/security/cve/CVE-2016-1668.html
https://www.suse.com/security/cve/CVE-2016-1669.html
https://www.suse.com/security/cve/CVE-2016-1670.html
https://bugzilla.suse.com/979859
--
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: openSUSE-SU-2016:1304-1
Rating: important
Affected Products:
openSUSE Leap 42.1
openSUSE 13.2
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!