Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

openSUSE Leap 15.2: 2021:1350-1 Important: Chromium Security Update

opensuse
Calendar Grey October 12, 2021
Dist Opensuse Esm H88
An enhancement for chromium resolves significant concerns within openSUSE Leap 15.2, fixing vulnerabilities present in the application.
An update that fixes 25 vulnerabilities is now available

Description

This update for chromium fixes the following issues:

Chromium 94.0.4606.81 (boo#1191463):

* CVE-2021-37977: Use after free in Garbage Collection

* CVE-2021-37978: Heap buffer overflow in Blink

* CVE-2021-37979: Heap buffer overflow in WebRTC

* CVE-2021-37980: Inappropriate implementation in Sandbox

Chromium 94.0.4606.54 (boo#1190765):

* CVE-2021-37956: Use after free in Offline use

* CVE-2021-37957: Use after free in WebGPU

* CVE-2021-37958: Inappropriate implementation in Navigation

* CVE-2021-37959: Use after free in Task Manager

* CVE-2021-37960: Inappropriate implementation in Blink graphics

* CVE-2021-37961: Use after free in Tab Strip

* CVE-2021-37962: Use after free in Performance Manager

* CVE-2021-37963: Side-channel information leakage in DevTools

* CVE-2021-37964: Inappropriate implementation in ChromeOS Networking

* CVE-2021-37965: Inappropriate implementation in Background Fetch API

* CVE-2021-37966: Inappropriate...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory buffer overflow software update openSUSE Leap chromium issues

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 15.2:

zypper in -t patch openSUSE-2021-1350=1

Package List

- openSUSE Leap 15.2 (x86_64):

chromedriver-94.0.4606.81-lp152.2.132.1

chromedriver-debuginfo-94.0.4606.81-lp152.2.132.1

chromium-94.0.4606.81-lp152.2.132.1

chromium-debuginfo-94.0.4606.81-lp152.2.132.1

References

https://www.suse.com/security/cve/CVE-2021-37956.html

https://www.suse.com/security/cve/CVE-2021-37957.html

https://www.suse.com/security/cve/CVE-2021-37958.html

https://www.suse.com/security/cve/CVE-2021-37959.html

https://www.suse.com/security/cve/CVE-2021-37960.html

https://www.suse.com/security/cve/CVE-2021-37961.html

https://www.suse.com/security/cve/CVE-2021-37962.html

https://www.suse.com/security/cve/CVE-2021-37963.html

https://www.suse.com/security/cve/CVE-2021-37964.html

https://www.suse.com/security/cve/CVE-2021-37965.html

https://www.suse.com/security/cve/CVE-2021-37966.html

https://www.suse.com/security/cve/CVE-2021-37967.html

https://www.suse.com/security/cve/CVE-2021-37968.html

https://www.suse.com/security/cve/CVE-2021-37969.html

https://www.suse.com/security/cve/CVE-2021-37970.html

https://www.suse.com/security/cve/CVE-2021-37971.html

https://www.suse.com/security/cve/CVE-2021-37972.html

https://www.suse.com/security/cve/CVE-2021-37973.html

https://www.suse.com/security/cve/CVE-2021-379...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2021:1350-1
Rating: important
Affected Products: openSUSE Leap 15.2 .

Topics%20covered

Topics Covered

security advisory buffer overflow software update openSUSE Leap chromium issues

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here