Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

openSUSE Leap 15.2: 2020:1206-1 Critical: Chromium Issues Fix

opensuse
Calendar Grey August 14, 2020
Dist Opensuse Esm H88
A crucial Fedora security patch resolves various vulnerabilities in firefox, improving defense against significant threats.
An update that fixes 14 vulnerabilities is now available.

Description

This update for chromium fixes the following issues:

- Chromium updated to 84.0.4147.125 (boo#1175085)

* CVE-2020-6542: Use after free in ANGLE

* CVE-2020-6543: Use after free in task scheduling

* CVE-2020-6544: Use after free in media

* CVE-2020-6545: Use after free in audio

* CVE-2020-6546: Inappropriate implementation in installer

* CVE-2020-6547: Incorrect security UI in media

* CVE-2020-6548: Heap buffer overflow in Skia

* CVE-2020-6549: Use after free in media

* CVE-2020-6550: Use after free in IndexedDB

* CVE-2020-6551: Use after free in WebXR

* CVE-2020-6552: Use after free in Blink

* CVE-2020-6553: Use after free in offline mode

* CVE-2020-6554: Use after free in extensions

* CVE-2020-6555: Out of bounds read in WebGL

* Various fixes from internal audits, fuzzing and other initiatives

- Disable wayland everywhere as it breaks headless and middle mouse copy

everywhere: boo#1174497...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory update critical software patch openSUSE chromium

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 15.2:

zypper in -t patch openSUSE-2020-1206=1

- openSUSE Leap 15.1:

zypper in -t patch openSUSE-2020-1206=1

Package List

- openSUSE Leap 15.2 (x86_64):

chromedriver-84.0.4147.125-lp152.2.12.2

chromedriver-debuginfo-84.0.4147.125-lp152.2.12.2

chromium-84.0.4147.125-lp152.2.12.2

chromium-debuginfo-84.0.4147.125-lp152.2.12.2

chromium-debugsource-84.0.4147.125-lp152.2.12.2

- openSUSE Leap 15.1 (x86_64):

chromedriver-84.0.4147.125-lp151.2.115.1

chromedriver-debuginfo-84.0.4147.125-lp151.2.115.1

chromium-84.0.4147.125-lp151.2.115.1

chromium-debuginfo-84.0.4147.125-lp151.2.115.1

chromium-debugsource-84.0.4147.125-lp151.2.115.1

References

https://www.suse.com/security/cve/CVE-2020-6542.html

https://www.suse.com/security/cve/CVE-2020-6543.html

https://www.suse.com/security/cve/CVE-2020-6544.html

https://www.suse.com/security/cve/CVE-2020-6545.html

https://www.suse.com/security/cve/CVE-2020-6546.html

https://www.suse.com/security/cve/CVE-2020-6547.html

https://www.suse.com/security/cve/CVE-2020-6548.html

https://www.suse.com/security/cve/CVE-2020-6549.html

https://www.suse.com/security/cve/CVE-2020-6550.html

https://www.suse.com/security/cve/CVE-2020-6551.html

https://www.suse.com/security/cve/CVE-2020-6552.html

https://www.suse.com/security/cve/CVE-2020-6553.html

https://www.suse.com/security/cve/CVE-2020-6554.html

https://www.suse.com/security/cve/CVE-2020-6555.html

https://bugzilla.suse.com/1174497

https://bugzilla.suse.com/1175044

https://bugzilla.suse.com/1175085

--

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2020:1206-1
Rating: important
Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1

Topics%20covered

Topics Covered

security advisory update critical software patch openSUSE chromium

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here