Chromium was updated to 50.0.2661.75 to fix the following vulnerabilities: - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding - CVE-2016-1652: Universal XSS in extension bindings - CVE-2016-1653: Out-of-bounds write in V8 - CVE-2016-1654: Uninitialized memory read in media - CVE-2016-1655: Use-after-free related to extensions - CVE-2016-1656: Android downloaded file path restriction bypass - CVE-2016-1657: Address bar spoofing - CVE-2016-1658: Potential leak of sensitive information to malicious extensions - CVE-2016-1659: Various fixes from internal audits, fuzzing and other initiatives Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12:
#975572
Cross- CVE-2016-1651 CVE-2016-1652 CVE-2016-1653
CVE-2016-1654 CVE-2016-1655 CVE-2016-1656
CVE-2016-1657 CVE-2016-1658 CVE-2016-1659
Affected Products:
SUSE Package Hub for SUSE Linux Enterprise 12
https://www.suse.com/security/cve/CVE-2016-1651.html
https://www.suse.com/security/cve/CVE-2016-1652.html
https://www.suse.com/security/cve/CVE-2016-1653.html
https://www.suse.com/security/cve/CVE-2016-1654.html
https://www.suse.com/security/cve/CVE-2016-1655.html
https://www.suse.com/security/cve/CVE-2016-1656.html
https://www.suse.com/security/cve/CVE-2016-1657.html
https://www.suse.com/security/cve/CVE-2016-1658.html
https://www.suse.com/security/cve/CVE-2016-1659.html
https://bugzilla.suse.com/975572
Get the latest Linux and open source security news straight to your inbox.