Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

openSUSE: 2020:1181-1 Low Severity: chromium Backports Fixes

opensuse
Calendar Grey September 18, 2020
Dist Opensuse Esm H88
Critical openSUSE patch resolves 6 minor vulnerabilities in chromium to enhance user security and improve functionality.
An update that fixes 6 vulnerabilities is now available.

Description

Chromium was updated to 84.0.4147.105 (boo#1174582):

* CVE-2020-6537: Type Confusion in V8

* CVE-2020-6538: Inappropriate implementation in WebView

* CVE-2020-6532: Use after free in SCTP

* CVE-2020-6539: Use after free in CSS

* CVE-2020-6540: Heap buffer overflow in Skia

* CVE-2020-6541: Use after free in WebUSB

This update was imported from the openSUSE:Leap:15.2:Update update project.

Topics%20covered

Topics Covered

security advisory web security low severity openSUSE backports chromium update 6 fixes

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP2:

zypper in -t patch openSUSE-2020-1181=1

Package List

- openSUSE Backports SLE-15-SP2 (aarch64 x86_64):

chromedriver-84.0.4147.105-bp152.2.10.1

chromium-84.0.4147.105-bp152.2.10.1

References

https://www.suse.com/security/cve/CVE-2020-6532.html

https://www.suse.com/security/cve/CVE-2020-6537.html

https://www.suse.com/security/cve/CVE-2020-6538.html

https://www.suse.com/security/cve/CVE-2020-6539.html

https://www.suse.com/security/cve/CVE-2020-6540.html

https://www.suse.com/security/cve/CVE-2020-6541.html

https://bugzilla.suse.com/1174582

--

Severity
low
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2020:1181-1
Rating: low
Affected Products: openSUSE Backports SLE-15-SP2

Topics%20covered

Topics Covered

security advisory web security low severity openSUSE backports chromium update 6 fixes

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here