Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

openSUSE 15 Backports: 2022:0085-1 Important: Chromium Fixes

opensuse
Calendar Grey March 20, 2022
Dist Opensuse Esm H88
An important announcement regarding Firefox resolves 12 distinct vulnerabilities, bolstering the protection of Fedora systems.
An update that fixes 10 vulnerabilities is now available

Description

This update for chromium fixes the following issues:

Update to version 99.0.4844.74 (boo#1197163)

* CVE-2022-0971: Use after free in Blink Layout

* CVE-2022-0972: Use after free in Extensions

* CVE-2022-0973: Use after free in Safe Browsing

* CVE-2022-0974: Use after free in Splitscreen

* CVE-2022-0975: Use after free in ANGLE

* CVE-2022-0976: Heap buffer overflow in GPU

* CVE-2022-0977: Use after free in Browser UI

* CVE-2022-0978: Use after free in ANGLE

* CVE-2022-0979: Use after free in Safe Browsing

* CVE-2022-0980: Use after free in New Tab Page

* Various fixes from internal audits, fuzzing and other initiatives

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP3:

zypper in -t patch openSUSE-2022-85=1

Package List

- openSUSE Backports SLE-15-SP3 (aarch64 x86_64):

chromedriver-99.0.4844.74-bp153.2.69.1

chromium-99.0.4844.74-bp153.2.69.1

References

https://www.suse.com/security/cve/CVE-2022-0971.html

https://www.suse.com/security/cve/CVE-2022-0972.html

https://www.suse.com/security/cve/CVE-2022-0973.html

https://www.suse.com/security/cve/CVE-2022-0974.html

https://www.suse.com/security/cve/CVE-2022-0975.html

https://www.suse.com/security/cve/CVE-2022-0976.html

https://www.suse.com/security/cve/CVE-2022-0977.html

https://www.suse.com/security/cve/CVE-2022-0978.html

https://www.suse.com/security/cve/CVE-2022-0979.html

https://www.suse.com/security/cve/CVE-2022-0980.html

https://bugzilla.suse.com/1197163

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2022:0085-1
Rating: important
Affected Products: openSUSE Backports SLE-15-SP3 .

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here