openSUSE-SU-2017:2482-1

Dashboard / Vulnerabilities / openSUSE-SU-2017:2482-1

openSUSE-SU-2017:2482-1

Summary: Security update for chromium

Details: This update for chromium to version 61.0.3163.79 fixes several issues. These security issues were fixed: - CVE-2017-5111: Use after free in PDFium (boo#1057364). - CVE-2017-5112: Heap buffer overflow in WebGL (boo#1057364). - CVE-2017-5113: Heap buffer overflow in Skia (boo#1057364). - CVE-2017-5114: Memory lifecycle issue in PDFium (boo#1057364). - CVE-2017-5115: Type confusion in V8 (boo#1057364). - CVE-2017-5116: Type confusion in V8 (boo#1057364). - CVE-2017-5117: Use of uninitialized value in Skia (boo#1057364). - CVE-2017-5118: Bypass of Content Security Policy in Blink (boo#1057364). - CVE-2017-5119: Use of uninitialized value in Skia (boo#1057364). - CVE-2017-5120: Potential HTTPS downgrade during redirect navigation (boo#1057364).

References: https://lists.opensuse.org/archives/list/[email protected]/thread/6LDRJVUTZ6JVIPU67FP76C2A2Z2QNPEA/#6LDRJVUTZ6JVIPU67FP76C2A2Z2QNPEA, https://bugzilla.suse.com/1057364, https://www.suse.com/security/cve/CVE-2017-5111, https://www.suse.com/security/cve/CVE-2017-5112, https://www.suse.com/security/cve/CVE-2017-5113, https://www.suse.com/security/cve/CVE-2017-5114, https://www.suse.com/security/cve/CVE-2017-5115, https://www.suse.com/security/cve/CVE-2017-5116, https://www.suse.com/security/cve/CVE-2017-5117, https://www.suse.com/security/cve/CVE-2017-5118, https://www.suse.com/security/cve/CVE-2017-5119, https://www.suse.com/security/cve/CVE-2017-5120