openSUSE: 2022:10036-1 Important: Chromium Security Issues
opensuse
June 29, 2022
An update that fixes 9 vulnerabilities is now available
Description
This update for chromium fixes the following issues:
Chromium 103.0.5060.53 (boo#1200783)
* CVE-2022-2156: Use after free in Base
* CVE-2022-2157: Use after free in Interest groups
* CVE-2022-2158: Type Confusion in V8
* CVE-2022-2160: Insufficient policy enforcement in DevTools
* CVE-2022-2161: Use after free in WebApp Provider
* CVE-2022-2162: Insufficient policy enforcement in File System API
* CVE-2022-2163: Use after free in Cast UI and Toolbar
* CVE-2022-2164: Inappropriate implementation in Extensions API
* CVE-2022-2165: Insufficient data validation in URL formatting
Topics Covered
Patch
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Backports SLE-15-SP3:
zypper in -t patch openSUSE-2022-10036=1
Package List
- openSUSE Backports SLE-15-SP3 (aarch64 x86_64):
chromedriver-103.0.5060.53-bp153.2.104.1
chromium-103.0.5060.53-bp153.2.104.1
References
https://www.suse.com/security/cve/CVE-2022-2156.html
https://www.suse.com/security/cve/CVE-2022-2157.html
https://www.suse.com/security/cve/CVE-2022-2158.html
https://www.suse.com/security/cve/CVE-2022-2160.html
https://www.suse.com/security/cve/CVE-2022-2161.html
https://www.suse.com/security/cve/CVE-2022-2162.html
https://www.suse.com/security/cve/CVE-2022-2163.html
https://www.suse.com/security/cve/CVE-2022-2164.html
https://www.suse.com/security/cve/CVE-2022-2165.html
https://bugzilla.suse.com/1200783
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: openSUSE-SU-2022:10036-1
Rating: important
Affected Products:
openSUSE Backports SLE-15-SP3
.
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!