Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

openSUSE: 2020:0233-1 Important: Chromium and RE2 Security Fixes

opensuse
Calendar Grey February 19, 2020
Dist Opensuse Esm H88
Critical openSUSE patch addresses various vulnerabilities in firefox and gmp, classified as high priority.
An update that fixes 38 vulnerabilities is now available.

Description

This update for chromium, re2 fixes the following issues:

- Update to 80.0.3987.87 boo#1162833:

* CVE-2020-6381: Integer overflow in JavaScript

* CVE-2020-6382: Type Confusion in JavaScript

* CVE-2019-18197: Multiple vulnerabilities in XML

* CVE-2019-19926: Inappropriate implementation in SQLite

* CVE-2020-6385: Insufficient policy enforcement in storage

* CVE-2019-19880, CVE-2019-19925: Multiple vulnerabilities in SQLite

* CVE-2020-6387: Out of bounds write in WebRTC

* CVE-2020-6388: Out of bounds memory access in WebAudio

* CVE-2020-6389: Out of bounds write in WebRTC

* CVE-2020-6390: Out of bounds memory access in streams

* CVE-2020-6391: Insufficient validation of untrusted input in Blink

* CVE-2020-6392: Insufficient policy enforcement in extensions

* CVE-2020-6393: Insufficient policy enforcement in Blink

* CVE-2020-6394: Insufficient policy enforcement in Blink

* CVE-2020-6395: Out of bounds read...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory update importance openSUSE chromium re2

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- SUSE Package Hub for SUSE Linux Enterprise 12:

zypper in -t patch openSUSE-2020-233=1

Package List

- SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64):

libre2-0-20200101-25.1

libre2-0-debuginfo-20200101-25.1

re2-debugsource-20200101-25.1

re2-devel-20200101-25.1

- SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 x86_64):

chromedriver-80.0.3987.87-31.1

chromium-80.0.3987.87-31.1

References

https://www.suse.com/security/cve/CVE-2019-18197.html

https://www.suse.com/security/cve/CVE-2019-19880.html

https://www.suse.com/security/cve/CVE-2019-19923.html

https://www.suse.com/security/cve/CVE-2019-19925.html

https://www.suse.com/security/cve/CVE-2019-19926.html

https://www.suse.com/security/cve/CVE-2020-6381.html

https://www.suse.com/security/cve/CVE-2020-6382.html

https://www.suse.com/security/cve/CVE-2020-6385.html

https://www.suse.com/security/cve/CVE-2020-6387.html

https://www.suse.com/security/cve/CVE-2020-6388.html

https://www.suse.com/security/cve/CVE-2020-6389.html

https://www.suse.com/security/cve/CVE-2020-6390.html

https://www.suse.com/security/cve/CVE-2020-6391.html

https://www.suse.com/security/cve/CVE-2020-6392.html

https://www.suse.com/security/cve/CVE-2020-6393.html

https://www.suse.com/security/cve/CVE-2020-6394.html

https://www.suse.com/security/cve/CVE-2020-6395.html

https://www.suse.com/security/cve/CVE-2020-6396.html

https://www.suse.com/security/cve/CVE-2020-6397.html

https:/...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2020:0233-1
Rating: important
Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12

Topics%20covered

Topics Covered

security advisory update importance openSUSE chromium re2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here