openSUSE-SU-2019:0206-1

Dashboard / Vulnerabilities / openSUSE-SU-2019:0206-1

openSUSE-SU-2019:0206-1

Summary: Security update for chromium

Details: This update for Chromium to version 72.0.3626.96 fixes the following issues: Security issues fixed (bsc#1123641 and bsc#1124936): - CVE-2019-5784: Inappropriate implementation in V8 - CVE-2019-5754: Inappropriate implementation in QUIC Networking. - CVE-2019-5782: Inappropriate implementation in V8. - CVE-2019-5755: Inappropriate implementation in V8. - CVE-2019-5756: Use after free in PDFium. - CVE-2019-5757: Type Confusion in SVG. - CVE-2019-5758: Use after free in Blink. - CVE-2019-5759: Use after free in HTML select elements. - CVE-2019-5760: Use after free in WebRTC. - CVE-2019-5761: Use after free in SwiftShader. - CVE-2019-5762: Use after free in PDFium. - CVE-2019-5763: Insufficient validation of untrusted input in V8. - CVE-2019-5764: Use after free in WebRTC. - CVE-2019-5765: Insufficient policy enforcement in the browser. - CVE-2019-5766: Insufficient policy enforcement in Canvas. - CVE-2019-5767: Incorrect security UI in WebAPKs. - CVE-2019-5768: Insufficient policy enforcement in DevTools. - CVE-2019-5769: Insufficient validation of untrusted input in Blink. - CVE-2019-5770: Heap buffer overflow in WebGL. - CVE-2019-5771: Heap buffer overflow in SwiftShader. - CVE-2019-5772: Use after free in PDFium. - CVE-2019-5773: Insufficient data validation in IndexedDB. - CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing. - CVE-2019-5775: Insufficient policy enforcement in Omnibox. - CVE-2019-5776: Insufficient policy enforcement in Omnibox. - CVE-2019-5777: Insufficient policy enforcement in Omnibox. - CVE-2019-5778: Insufficient policy enforcement in Extensions. - CVE-2019-5779: Insufficient policy enforcement in ServiceWorker. - CVE-2019-5780: Insufficient policy enforcement. - CVE-2019-5781: Insufficient policy enforcement in Omnibox. For a full list of changes refer to https://chromereleases.googleblog.com/2019/02/stable-channel-update-for-desktop.html

References: https://lists.opensuse.org/archives/list/[email protected]/thread/54XI3C3VCSGOQQM3NLSI4PKNDNEPEMXX/#54XI3C3VCSGOQQM3NLSI4PKNDNEPEMXX, https://bugzilla.suse.com/1123641, https://bugzilla.suse.com/1124936, https://www.suse.com/security/cve/CVE-2019-5754, https://www.suse.com/security/cve/CVE-2019-5755, https://www.suse.com/security/cve/CVE-2019-5756, https://www.suse.com/security/cve/CVE-2019-5757, https://www.suse.com/security/cve/CVE-2019-5758, https://www.suse.com/security/cve/CVE-2019-5759, https://www.suse.com/security/cve/CVE-2019-5760, https://www.suse.com/security/cve/CVE-2019-5761, https://www.suse.com/security/cve/CVE-2019-5762, https://www.suse.com/security/cve/CVE-2019-5763, https://www.suse.com/security/cve/CVE-2019-5764, https://www.suse.com/security/cve/CVE-2019-5765, https://www.suse.com/security/cve/CVE-2019-5766, https://www.suse.com/security/cve/CVE-2019-5767, https://www.suse.com/security/cve/CVE-2019-5768, https://www.suse.com/security/cve/CVE-2019-5769, https://www.suse.com/security/cve/CVE-2019-5770, https://www.suse.com/security/cve/CVE-2019-5771, https://www.suse.com/security/cve/CVE-2019-5772, https://www.suse.com/security/cve/CVE-2019-5773, https://www.suse.com/security/cve/CVE-2019-5774, https://www.suse.com/security/cve/CVE-2019-5775, https://www.suse.com/security/cve/CVE-2019-5776, https://www.suse.com/security/cve/CVE-2019-5777, https://www.suse.com/security/cve/CVE-2019-5778, https://www.suse.com/security/cve/CVE-2019-5779, https://www.suse.com/security/cve/CVE-2019-5780, https://www.suse.com/security/cve/CVE-2019-5781, https://www.suse.com/security/cve/CVE-2019-5782, https://www.suse.com/security/cve/CVE-2019-5784