Alerts This Week
Warning Icon 1 535
Alerts This Week
Warning Icon 1 535

openSUSE: 2019:1666-1 Important: Chromium Security Vulnerabilities Fixed

opensuse
Calendar Grey June 28, 2019
Dist Opensuse Esm H88
A critical patch has been released for Firefox, addressing 47 security flaws across various Ubuntu versions.
An update that fixes 53 vulnerabilities is now available.

Description

This update for chromium fixes the following issues:

Chromium was updated to 75.0.3770.90 (boo#1137332 boo#1138287):

* CVE-2019-5842: Use-after-free in Blink.

Also updated to 75.0.3770.80 boo#1137332:

* CVE-2019-5828: Use after free in ServiceWorker

* CVE-2019-5829: Use after free in Download Manager

* CVE-2019-5830: Incorrectly credentialed requests in CORS

* CVE-2019-5831: Incorrect map processing in V8

* CVE-2019-5832: Incorrect CORS handling in XHR

* CVE-2019-5833: Inconsistent security UI placemen

* CVE-2019-5835: Out of bounds read in Swiftshader

* CVE-2019-5836: Heap buffer overflow in Angle

* CVE-2019-5837: Cross-origin resources size disclosure in Appcache

* CVE-2019-5838: Overly permissive tab access in Extensions

* CVE-2019-5839: Incorrect handling of certain code points in Blink

* CVE-2019-5840: Popup blocker bypass

* Various fixes from internal audits, fuzzing and other initiatives

* CVE-2019-5834: URL spoof in...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory software update vulnerability important openSUSE chromium

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 42.3:

zypper in -t patch openSUSE-2019-1666=1

- openSUSE Leap 15.1:

zypper in -t patch openSUSE-2019-1666=1

- openSUSE Leap 15.0:

zypper in -t patch openSUSE-2019-1666=1

- openSUSE Backports SLE-15:

zypper in -t patch openSUSE-2019-1666=1

Package List

- openSUSE Leap 42.3 (x86_64):

chromedriver-75.0.3770.90-217.1

chromedriver-debuginfo-75.0.3770.90-217.1

chromium-75.0.3770.90-217.1

chromium-debuginfo-75.0.3770.90-217.1

chromium-debugsource-75.0.3770.90-217.1

- openSUSE Leap 15.1 (x86_64):

chromedriver-75.0.3770.90-lp151.2.9.3

chromedriver-debuginfo-75.0.3770.90-lp151.2.9.3

chromium-75.0.3770.90-lp151.2.9.3

chromium-debuginfo-75.0.3770.90-lp151.2.9.3

chromium-debugsource-75.0.3770.90-lp151.2.9.3

- openSUSE Leap 15.0 (x86_64):

chromedriver-75.0.3770.90-lp150.218.4

chromedriver-debuginfo-75.0.3770.90-lp150.218.4

chromium-75.0.3770.90-lp150.218.4

chromium-debuginfo-75.0.3770.90-lp150.218.4

chromium-debugsource-75.0.3770.90-lp150.218.4

- openSUSE Backports SLE-15 (aarch64 x86_64):

chromedriver-75.0.3770.90-bp150.213.3

chromedriver-debuginfo-75.0.3770.90-bp150.213.3

chromium-75.0.3770.90-bp150.213.3

chromium-debuginfo-75.0.3770.90-bp150.213.3

chromium-debugsource-75.0.3770.90-bp150.213.3

References

https://www.suse.com/security/cve/CVE-2019-5787.html

https://www.suse.com/security/cve/CVE-2019-5788.html

https://www.suse.com/security/cve/CVE-2019-5789.html

https://www.suse.com/security/cve/CVE-2019-5790.html

https://www.suse.com/security/cve/CVE-2019-5791.html

https://www.suse.com/security/cve/CVE-2019-5792.html

https://www.suse.com/security/cve/CVE-2019-5793.html

https://www.suse.com/security/cve/CVE-2019-5794.html

https://www.suse.com/security/cve/CVE-2019-5795.html

https://www.suse.com/security/cve/CVE-2019-5796.html

https://www.suse.com/security/cve/CVE-2019-5797.html

https://www.suse.com/security/cve/CVE-2019-5798.html

https://www.suse.com/security/cve/CVE-2019-5799.html

https://www.suse.com/security/cve/CVE-2019-5800.html

https://www.suse.com/security/cve/CVE-2019-5801.html

https://www.suse.com/security/cve/CVE-2019-5802.html

https://www.suse.com/security/cve/CVE-2019-5803.html

https://www.suse.com/security/cve/CVE-2019-5804.html

https://www.suse.com/security/cve/CVE-2019-5805.html

https://www....

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2019:1666-1
Rating: important
Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.1 openSUSE Leap 15.0 openSUSE Backports SLE-15

Topics%20covered

Topics Covered

security advisory software update vulnerability important openSUSE chromium

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here