openSUSE Leap 15.0: 2019:1558-1 Important: Chromium CORS Issue
opensuse
June 15, 2019
An update that fixes 13 vulnerabilities is now available.
Description
This update for chromium to version 75.0.3770.80 fixes the following
issues:
Security issues fixed:
- CVE-2019-5828: Fixed a Use after free in ServiceWorker
- CVE-2019-5829: Fixed Use after free in Download Manager
- CVE-2019-5830: Fixed an incorrectly credentialed requests in CORS
- CVE-2019-5831: Fixed an incorrect map processing in V8
- CVE-2019-5832: Fixed an incorrect CORS handling in XHR
- CVE-2019-5833: Fixed an inconsistent security UI placemen
- CVE-2019-5835: Fixed an out of bounds read in Swiftshader
- CVE-2019-5836: Fixed a heap buffer overflow in Angle
- CVE-2019-5837: Fixed a cross-origin resources size disclosure in Appcache
- CVE-2019-5838: Fixed an overly permissive tab access in Extensions
- CVE-2019-5839: Fixed an incorrect handling of certain code points in
Blink
- CVE-2019-5840: Fixed a popup blocker bypass
Topics Covered
Patch
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 15.0:
zypper in -t patch openSUSE-2019-1558=1
Package List
- openSUSE Leap 15.0 (x86_64):
chromedriver-75.0.3770.80-lp150.215.1
chromedriver-debuginfo-75.0.3770.80-lp150.215.1
chromium-75.0.3770.80-lp150.215.1
chromium-debuginfo-75.0.3770.80-lp150.215.1
chromium-debugsource-75.0.3770.80-lp150.215.1
References
https://www.suse.com/security/cve/CVE-2019-5828.html
https://www.suse.com/security/cve/CVE-2019-5829.html
https://www.suse.com/security/cve/CVE-2019-5830.html
https://www.suse.com/security/cve/CVE-2019-5831.html
https://www.suse.com/security/cve/CVE-2019-5832.html
https://www.suse.com/security/cve/CVE-2019-5833.html
https://www.suse.com/security/cve/CVE-2019-5834.html
https://www.suse.com/security/cve/CVE-2019-5835.html
https://www.suse.com/security/cve/CVE-2019-5836.html
https://www.suse.com/security/cve/CVE-2019-5837.html
https://www.suse.com/security/cve/CVE-2019-5838.html
https://www.suse.com/security/cve/CVE-2019-5839.html
https://www.suse.com/security/cve/CVE-2019-5840.html
https://bugzilla.suse.com/1137332
--
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: openSUSE-SU-2019:1558-1
Rating: important
Affected Products:
openSUSE Leap 15.0
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!