openSUSE-SU-2017:0740-1

    Dashboard / Vulnerabilities / openSUSE-SU-2017:0740-1

    openSUSE-SU-2017:0740-1

    Published: 17 Mar 2017Last Modified: 4 Feb 2026

    Summary: Security update for Chromium

    Details: Chromium was updated to 57.0.2987.98 to fix security issues and bugs. The following vulnerabilities were fixed (bsc#1028848): - CVE-2017-5030: Memory corruption in V8 - CVE-2017-5031: Use after free in ANGLE - CVE-2017-5032: Out of bounds write in PDFium - CVE-2017-5029: Integer overflow in libxslt - CVE-2017-5034: Use after free in PDFium - CVE-2017-5035: Incorrect security UI in Omnibox - CVE-2017-5036: Use after free in PDFium - CVE-2017-5037: Multiple out of bounds writes in ChunkDemuxer - CVE-2017-5039: Use after free in PDFium - CVE-2017-5040: Information disclosure in V8 - CVE-2017-5041: Address spoofing in Omnibox - CVE-2017-5033: Bypass of Content Security Policy in Blink - CVE-2017-5042: Incorrect handling of cookies in Cast - CVE-2017-5038: Use after free in GuestView - CVE-2017-5043: Use after free in GuestView - CVE-2017-5044: Heap overflow in Skia - CVE-2017-5045: Information disclosure in XSS Auditor - CVE-2017-5046: Information disclosure in Blink The following non-security changes are included: - Address broken rendering on non-intel cards

    References: https://lists.opensuse.org/archives/list/[email protected]/thread/2PWEOYPGN6NS2GPOOLH27ZPXQ7KSRFP4/#2PWEOYPGN6NS2GPOOLH27ZPXQ7KSRFP4, https://bugzilla.suse.com/1028848, https://www.suse.com/security/cve/CVE-2017-5029, https://www.suse.com/security/cve/CVE-2017-5030, https://www.suse.com/security/cve/CVE-2017-5031, https://www.suse.com/security/cve/CVE-2017-5032, https://www.suse.com/security/cve/CVE-2017-5033, https://www.suse.com/security/cve/CVE-2017-5034, https://www.suse.com/security/cve/CVE-2017-5035, https://www.suse.com/security/cve/CVE-2017-5036, https://www.suse.com/security/cve/CVE-2017-5037, https://www.suse.com/security/cve/CVE-2017-5038, https://www.suse.com/security/cve/CVE-2017-5039, https://www.suse.com/security/cve/CVE-2017-5040, https://www.suse.com/security/cve/CVE-2017-5041, https://www.suse.com/security/cve/CVE-2017-5042, https://www.suse.com/security/cve/CVE-2017-5043, https://www.suse.com/security/cve/CVE-2017-5044, https://www.suse.com/security/cve/CVE-2017-5045, https://www.suse.com/security/cve/CVE-2017-5046

    Affected packages

    Package

    Name: chromium

    Purl: pkg:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2012%20SP2

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -57.0.2987.98-8.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High