openSUSE-SU-2017:0563-1

    Dashboard / Vulnerabilities / openSUSE-SU-2017:0563-1

    openSUSE-SU-2017:0563-1

    Published: 16 Dec 2016Last Modified: 4 Feb 2026

    Summary: Security update for Chromium

    Details: This update to Chromium 55.0.2883.75 fixes the following vulnerabilities: - CVE-2016-9651: Private property access in V8 - CVE-2016-5208: Universal XSS in Blink - CVE-2016-5207: Universal XSS in Blink - CVE-2016-5206: Same-origin bypass in PDFium - CVE-2016-5205: Universal XSS in Blink - CVE-2016-5204: Universal XSS in Blink - CVE-2016-5209: Out of bounds write in Blink - CVE-2016-5203: Use after free in PDFium - CVE-2016-5210: Out of bounds write in PDFium - CVE-2016-5212: Local file disclosure in DevTools - CVE-2016-5211: Use after free in PDFium - CVE-2016-5213: Use after free in V8 - CVE-2016-5214: File download protection bypass - CVE-2016-5216: Use after free in PDFium - CVE-2016-5215: Use after free in Webaudio - CVE-2016-5217: Use of unvalidated data in PDFium - CVE-2016-5218: Address spoofing in Omnibox - CVE-2016-5219: Use after free in V8 - CVE-2016-5221: Integer overflow in ANGLE - CVE-2016-5220: Local file access in PDFium - CVE-2016-5222: Address spoofing in Omnibox - CVE-2016-9650: CSP Referrer disclosure - CVE-2016-5223: Integer overflow in PDFium - CVE-2016-5226: Limited XSS in Blink - CVE-2016-5225: CSP bypass in Blink - CVE-2016-5224: Same-origin bypass in SVG - CVE-2016-9652: Various fixes from internal audits, fuzzing and other initiatives The default bookmarks override was removed. The following packaging changes are included: - Switch to system libraries: harfbuzz, zlib, ffmpeg, where available. - Chromium now requires harfbuzz >= 1.3.0

    References: https://lists.opensuse.org/archives/list/[email protected]/thread/IOM3J2HPT4XSGXITE6DSNQRVKV6CULMT/#IOM3J2HPT4XSGXITE6DSNQRVKV6CULMT, https://bugzilla.suse.com/1013236, https://www.suse.com/security/cve/CVE-2016-5203, https://www.suse.com/security/cve/CVE-2016-5204, https://www.suse.com/security/cve/CVE-2016-5205, https://www.suse.com/security/cve/CVE-2016-5206, https://www.suse.com/security/cve/CVE-2016-5207, https://www.suse.com/security/cve/CVE-2016-5208, https://www.suse.com/security/cve/CVE-2016-5209, https://www.suse.com/security/cve/CVE-2016-5210, https://www.suse.com/security/cve/CVE-2016-5211, https://www.suse.com/security/cve/CVE-2016-5212, https://www.suse.com/security/cve/CVE-2016-5213, https://www.suse.com/security/cve/CVE-2016-5214, https://www.suse.com/security/cve/CVE-2016-5215, https://www.suse.com/security/cve/CVE-2016-5216, https://www.suse.com/security/cve/CVE-2016-5217, https://www.suse.com/security/cve/CVE-2016-5218, https://www.suse.com/security/cve/CVE-2016-5219, https://www.suse.com/security/cve/CVE-2016-5220, https://www.suse.com/security/cve/CVE-2016-5221, https://www.suse.com/security/cve/CVE-2016-5222, https://www.suse.com/security/cve/CVE-2016-5223, https://www.suse.com/security/cve/CVE-2016-5224, https://www.suse.com/security/cve/CVE-2016-5225, https://www.suse.com/security/cve/CVE-2016-5226, https://www.suse.com/security/cve/CVE-2016-9650, https://www.suse.com/security/cve/CVE-2016-9651, https://www.suse.com/security/cve/CVE-2016-9652

    Affected packages

    Package

    Name: chromium

    Purl: pkg:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2012%20SP2

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -55.0.2883.75-2.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High