openSUSE Security Update: Security update for chromium
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2019:0206-1
Rating:             important
References:         #1123641 #1124936 
Cross-References:   CVE-2019-5754 CVE-2019-5755 CVE-2019-5756
                    CVE-2019-5757 CVE-2019-5758 CVE-2019-5759
                    CVE-2019-5760 CVE-2019-5761 CVE-2019-5762
                    CVE-2019-5763 CVE-2019-5764 CVE-2019-5765
                    CVE-2019-5766 CVE-2019-5767 CVE-2019-5768
                    CVE-2019-5769 CVE-2019-5770 CVE-2019-5771
                    CVE-2019-5772 CVE-2019-5773 CVE-2019-5774
                    CVE-2019-5775 CVE-2019-5776 CVE-2019-5777
                    CVE-2019-5778 CVE-2019-5779 CVE-2019-5780
                    CVE-2019-5781 CVE-2019-5782 CVE-2019-5784
                   
Affected Products:
                    SUSE Package Hub for SUSE Linux Enterprise 12
______________________________________________________________________________

   An update that fixes 30 vulnerabilities is now available.

Description:

   This update for Chromium to version 72.0.3626.96 fixes the following
   issues:

   Security issues fixed (bsc#1123641 and bsc#1124936):

   - CVE-2019-5784: Inappropriate implementation in V8
   - CVE-2019-5754: Inappropriate implementation in QUIC Networking.
   - CVE-2019-5782: Inappropriate implementation in V8.
   - CVE-2019-5755: Inappropriate implementation in V8.
   - CVE-2019-5756: Use after free in PDFium.
   - CVE-2019-5757: Type Confusion in SVG.
   - CVE-2019-5758: Use after free in Blink.
   - CVE-2019-5759: Use after free in HTML select elements.
   - CVE-2019-5760: Use after free in WebRTC.
   - CVE-2019-5761: Use after free in SwiftShader.
   - CVE-2019-5762: Use after free in PDFium.
   - CVE-2019-5763: Insufficient validation of untrusted input in V8.
   - CVE-2019-5764: Use after free in WebRTC.
   - CVE-2019-5765: Insufficient policy enforcement in the browser.
   - CVE-2019-5766: Insufficient policy enforcement in Canvas.
   - CVE-2019-5767: Incorrect security UI in WebAPKs.
   - CVE-2019-5768: Insufficient policy enforcement in DevTools.
   - CVE-2019-5769: Insufficient validation of untrusted input in Blink.
   - CVE-2019-5770: Heap buffer overflow in WebGL.
   - CVE-2019-5771: Heap buffer overflow in SwiftShader.
   - CVE-2019-5772: Use after free in PDFium.
   - CVE-2019-5773: Insufficient data validation in IndexedDB.
   - CVE-2019-5774: Insufficient validation of untrusted input in
     SafeBrowsing.
   - CVE-2019-5775: Insufficient policy enforcement in Omnibox.
   - CVE-2019-5776: Insufficient policy enforcement in Omnibox.
   - CVE-2019-5777: Insufficient policy enforcement in Omnibox.
   - CVE-2019-5778: Insufficient policy enforcement in Extensions.
   - CVE-2019-5779: Insufficient policy enforcement in ServiceWorker.
   - CVE-2019-5780: Insufficient policy enforcement.
   - CVE-2019-5781: Insufficient policy enforcement in Omnibox.

   For a full list of changes refer to
   https://chromereleases.googleblog.com/2019/02/stable-channel-update-for-des
   ktop.html


Patch Instructions:

   To install this openSUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE Package Hub for SUSE Linux Enterprise 12:

      zypper in -t patch openSUSE-2019-206=1



Package List:

   - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64):

      chromedriver-72.0.3626.96-88.1
      chromedriver-debuginfo-72.0.3626.96-88.1
      chromium-72.0.3626.96-88.1
      chromium-debuginfo-72.0.3626.96-88.1
      chromium-debugsource-72.0.3626.96-88.1


References:

   https://www.suse.com/security/cve/CVE-2019-5754.html
   https://www.suse.com/security/cve/CVE-2019-5755.html
   https://www.suse.com/security/cve/CVE-2019-5756.html
   https://www.suse.com/security/cve/CVE-2019-5757.html
   https://www.suse.com/security/cve/CVE-2019-5758.html
   https://www.suse.com/security/cve/CVE-2019-5759.html
   https://www.suse.com/security/cve/CVE-2019-5760.html
   https://www.suse.com/security/cve/CVE-2019-5761.html
   https://www.suse.com/security/cve/CVE-2019-5762.html
   https://www.suse.com/security/cve/CVE-2019-5763.html
   https://www.suse.com/security/cve/CVE-2019-5764.html
   https://www.suse.com/security/cve/CVE-2019-5765.html
   https://www.suse.com/security/cve/CVE-2019-5766.html
   https://www.suse.com/security/cve/CVE-2019-5767.html
   https://www.suse.com/security/cve/CVE-2019-5768.html
   https://www.suse.com/security/cve/CVE-2019-5769.html
   https://www.suse.com/security/cve/CVE-2019-5770.html
   https://www.suse.com/security/cve/CVE-2019-5771.html
   https://www.suse.com/security/cve/CVE-2019-5772.html
   https://www.suse.com/security/cve/CVE-2019-5773.html
   https://www.suse.com/security/cve/CVE-2019-5774.html
   https://www.suse.com/security/cve/CVE-2019-5775.html
   https://www.suse.com/security/cve/CVE-2019-5776.html
   https://www.suse.com/security/cve/CVE-2019-5777.html
   https://www.suse.com/security/cve/CVE-2019-5778.html
   https://www.suse.com/security/cve/CVE-2019-5779.html
   https://www.suse.com/security/cve/CVE-2019-5780.html
   https://www.suse.com/security/cve/CVE-2019-5781.html
   https://www.suse.com/security/cve/CVE-2019-5782.html
   https://www.suse.com/security/cve/CVE-2019-5784.html
   https://bugzilla.suse.com/1123641
   https://bugzilla.suse.com/1124936

--

openSUSE: 2019:0206-1: important: chromium

February 18, 2019
An update that fixes 30 vulnerabilities is now available.

Description

This update for Chromium to version 72.0.3626.96 fixes the following issues: Security issues fixed (bsc#1123641 and bsc#1124936): - CVE-2019-5784: Inappropriate implementation in V8 - CVE-2019-5754: Inappropriate implementation in QUIC Networking. - CVE-2019-5782: Inappropriate implementation in V8. - CVE-2019-5755: Inappropriate implementation in V8. - CVE-2019-5756: Use after free in PDFium. - CVE-2019-5757: Type Confusion in SVG. - CVE-2019-5758: Use after free in Blink. - CVE-2019-5759: Use after free in HTML select elements. - CVE-2019-5760: Use after free in WebRTC. - CVE-2019-5761: Use after free in SwiftShader. - CVE-2019-5762: Use after free in PDFium. - CVE-2019-5763: Insufficient validation of untrusted input in V8. - CVE-2019-5764: Use after free in WebRTC. - CVE-2019-5765: Insufficient policy enforcement in the browser. - CVE-2019-5766: Insufficient policy enforcement in Canvas. - CVE-2019-5767: Incorrect security UI in WebAPKs. - CVE-2019-5768: Insufficient policy enforcement in DevTools. - CVE-2019-5769: Insufficient validation of untrusted input in Blink. - CVE-2019-5770: Heap buffer overflow in WebGL. - CVE-2019-5771: Heap buffer overflow in SwiftShader. - CVE-2019-5772: Use after free in PDFium. - CVE-2019-5773: Insufficient data validation in IndexedDB. - CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. - CVE-2019-5775: Insufficient policy enforcement in Omnibox. - CVE-2019-5776: Insufficient policy enforcement in Omnibox. - CVE-2019-5777: Insufficient policy enforcement in Omnibox. - CVE-2019-5778: Insufficient policy enforcement in Extensions. - CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. - CVE-2019-5780: Insufficient policy enforcement. - CVE-2019-5781: Insufficient policy enforcement in Omnibox. For a full list of changes refer to https://chromereleases.googleblog.com/2019/02/stable-channel-update-for-des ktop.html

 

Patch

Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-206=1


Package List

- SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-72.0.3626.96-88.1 chromedriver-debuginfo-72.0.3626.96-88.1 chromium-72.0.3626.96-88.1 chromium-debuginfo-72.0.3626.96-88.1 chromium-debugsource-72.0.3626.96-88.1


References

https://www.suse.com/security/cve/CVE-2019-5754.html https://www.suse.com/security/cve/CVE-2019-5755.html https://www.suse.com/security/cve/CVE-2019-5756.html https://www.suse.com/security/cve/CVE-2019-5757.html https://www.suse.com/security/cve/CVE-2019-5758.html https://www.suse.com/security/cve/CVE-2019-5759.html https://www.suse.com/security/cve/CVE-2019-5760.html https://www.suse.com/security/cve/CVE-2019-5761.html https://www.suse.com/security/cve/CVE-2019-5762.html https://www.suse.com/security/cve/CVE-2019-5763.html https://www.suse.com/security/cve/CVE-2019-5764.html https://www.suse.com/security/cve/CVE-2019-5765.html https://www.suse.com/security/cve/CVE-2019-5766.html https://www.suse.com/security/cve/CVE-2019-5767.html https://www.suse.com/security/cve/CVE-2019-5768.html https://www.suse.com/security/cve/CVE-2019-5769.html https://www.suse.com/security/cve/CVE-2019-5770.html https://www.suse.com/security/cve/CVE-2019-5771.html https://www.suse.com/security/cve/CVE-2019-5772.html https://www.suse.com/security/cve/CVE-2019-5773.html https://www.suse.com/security/cve/CVE-2019-5774.html https://www.suse.com/security/cve/CVE-2019-5775.html https://www.suse.com/security/cve/CVE-2019-5776.html https://www.suse.com/security/cve/CVE-2019-5777.html https://www.suse.com/security/cve/CVE-2019-5778.html https://www.suse.com/security/cve/CVE-2019-5779.html https://www.suse.com/security/cve/CVE-2019-5780.html https://www.suse.com/security/cve/CVE-2019-5781.html https://www.suse.com/security/cve/CVE-2019-5782.html https://www.suse.com/security/cve/CVE-2019-5784.html https://bugzilla.suse.com/1123641 https://bugzilla.suse.com/1124936--


Severity
Announcement ID: openSUSE-SU-2019:0206-1
Rating: important
Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12

Related News

28.Lock Globe Esm H320
1 - 2 min read
The intersection of Linux and quantum computing has become increasingly apparent, emphasizing the importance of Linux-based operating systems in
6.EmailConnection Touch Esm H320
2 - 3 min read
Recent security updates for Ubuntu and Debian have been released to address vulnerabilities in Thunderbird, the popular open-source mail and
30.Lock Globe Motherboard Esm H320
1 - 2 min read
As cybersecurity practitioners, we are no strangers to the constant threat of malicious actors and the importance of remaining vigilant to protect
22.Lock ScreenEffect Esm H320
1 - 2 min read
EndeavorOS Gemini is a captivating and charming desktop operating system based on Arch Linux. The new release includes a kernel upgrade, 3D graphics
25.@Sign Hook Keyboard Esm H320
1 min read
Cyber risk is increasing for individuals and organizations, making flexible and robust solutions for identifying spam and malware increasingly
19.Laptop Bed Esm H320
2 - 3 min read
The recently released Linux Kernel 6.9 brings forth a blend of crucial upgrades and enhancements, catering to the ever-evolving needs of the Linux
4.Lock AbstractDigital Esm H320
1 - 2 min read
Nmap 7.95 introduces myriad enhancements, primarily focusing on OS and service detection signatures. This reflects the dedication of the Nmap
5.ShakingHands Esm H320
3 - 5 min read
There has been a promising shift in the tech industry, with major companies pledging to release products with built-in security features. This

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved