Alerts This Week
Warning Icon 1 626
Alerts This Week
Warning Icon 1 626

openSUSE: 2018:3835-1 Important: Fixes 18 Critical Issues in Chromium

opensuse
Calendar Grey November 21, 2018
Dist Opensuse Esm H88
Addresses 18 major security flaws in chromium for openSUSE. Utilize zypper or YaST for an upgrade to bolster system protection.
An update that fixes 18 vulnerabilities is now available.

Description

This update contains Chromium 70.0.3538.102 and fixes security issues and

bugs.

Vulnerabilities fixed in 70.0.3538.102:

- CVE-2018-17478: Out of bounds memory access in V8 (boo#1115537)

Vulnerabilities fixed in 70.0.3538.67 (bsc#1112111):

- CVE-2018-17462: Sandbox escape in AppCache

- CVE-2018-17463: Remote code execution in V8

- Heap buffer overflow in Little CMS in PDFium

- CVE-2018-17464: URL spoof in Omnibox

- CVE-2018-17465: Use after free in V8

- CVE-2018-17466: Memory corruption in Angle

- CVE-2018-17467: URL spoof in Omnibox

- CVE-2018-17468: Cross-origin URL disclosure in Blink

- CVE-2018-17469: Heap buffer overflow in PDFium

- CVE-2018-17470: Memory corruption in GPU Internals

- CVE-2018-17471: Security UI occlusion in full screen mode

- CVE-2018-17473: URL spoof in Omnibox

- CVE-2018-17474: Use after free in Blink

- CVE-2018-17475: URL spoof in Omnibox

- CVE-2018-17476: Security UI occlusion in full screen...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory security issue update vulnerability important openSUSE chromium

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- SUSE Package Hub for SUSE Linux Enterprise 12:

zypper in -t patch openSUSE-2018-1436=1

Package List

- SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64):

chromedriver-70.0.3538.102-74.1

chromium-70.0.3538.102-74.1

References

https://www.suse.com/security/cve/CVE-2018-17462.html

https://www.suse.com/security/cve/CVE-2018-17463.html

https://www.suse.com/security/cve/CVE-2018-17464.html

https://www.suse.com/security/cve/CVE-2018-17465.html

https://www.suse.com/security/cve/CVE-2018-17466.html

https://www.suse.com/security/cve/CVE-2018-17467.html

https://www.suse.com/security/cve/CVE-2018-17468.html

https://www.suse.com/security/cve/CVE-2018-17469.html

https://www.suse.com/security/cve/CVE-2018-17470.html

https://www.suse.com/security/cve/CVE-2018-17471.html

https://www.suse.com/security/cve/CVE-2018-17472.html

https://www.suse.com/security/cve/CVE-2018-17473.html

https://www.suse.com/security/cve/CVE-2018-17474.html

https://www.suse.com/security/cve/CVE-2018-17475.html

https://www.suse.com/security/cve/CVE-2018-17476.html

https://www.suse.com/security/cve/CVE-2018-17477.html

https://www.suse.com/security/cve/CVE-2018-17478.html

https://www.suse.com/security/cve/CVE-2018-5179.html

https://bugzilla.suse.com/1112111

https://bugzil...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2018:3835-1
Rating: important
Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12

Topics%20covered

Topics Covered

security advisory security issue update vulnerability important openSUSE chromium

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here