Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

SUSE Linux Enterprise 12: SUSE-SU-2016:1060-1 Critical Chromium Patch

suse
Calendar Grey April 17, 2016
Dist Suse Esm H88
A crucial SUSE security update for Chromium has been released, fixing various issues affecting system stability and security.
An update that fixes 9 vulnerabilities is now available

Summary

Chromium was updated to 50.0.2661.75 to fix the following vulnerabilities: - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding - CVE-2016-1652: Universal XSS in extension bindings - CVE-2016-1653: Out-of-bounds write in V8 - CVE-2016-1654: Uninitialized memory read in media - CVE-2016-1655: Use-after-free related to extensions - CVE-2016-1656: Android downloaded file path restriction bypass - CVE-2016-1657: Address bar spoofing - CVE-2016-1658: Potential leak of sensitive information to malicious extensions - CVE-2016-1659: Various fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12:

References

#975572

Cross- CVE-2016-1651 CVE-2016-1652 CVE-2016-1653

CVE-2016-1654 CVE-2016-1655 CVE-2016-1656

CVE-2016-1657 CVE-2016-1658 CVE-2016-1659

Affected Products:

SUSE Package Hub for SUSE Linux Enterprise 12

https://www.suse.com/security/cve/CVE-2016-1651.html

https://www.suse.com/security/cve/CVE-2016-1652.html

https://www.suse.com/security/cve/CVE-2016-1653.html

https://www.suse.com/security/cve/CVE-2016-1654.html

https://www.suse.com/security/cve/CVE-2016-1655.html

https://www.suse.com/security/cve/CVE-2016-1656.html

https://www.suse.com/security/cve/CVE-2016-1657.html

https://www.suse.com/security/cve/CVE-2016-1658.html

https://www.suse.com/security/cve/CVE-2016-1659.html

https://bugzilla.suse.com/975572

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2016:1060-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here