openSUSE-SU-2019:1557-1

Dashboard / Vulnerabilities / openSUSE-SU-2019:1557-1

openSUSE-SU-2019:1557-1

Summary: Security update for chromium

Details: This update for chromium to version 75.0.3770.80 fixes the following issues: Security issues fixed: - CVE-2019-5828: Fixed a Use after free in ServiceWorker - CVE-2019-5829: Fixed Use after free in Download Manager - CVE-2019-5830: Fixed an incorrectly credentialed requests in CORS - CVE-2019-5831: Fixed an incorrect map processing in V8 - CVE-2019-5832: Fixed an incorrect CORS handling in XHR - CVE-2019-5833: Fixed an inconsistent security UI placemen - CVE-2019-5835: Fixed an out of bounds read in Swiftshader - CVE-2019-5836: Fixed a heap buffer overflow in Angle - CVE-2019-5837: Fixed a cross-origin resources size disclosure in Appcache - CVE-2019-5838: Fixed an overly permissive tab access in Extensions - CVE-2019-5839: Fixed an incorrect handling of certain code points in Blink - CVE-2019-5840: Fixed a popup blocker bypass - CVE-2019-5834: Fixed a URL spoof in Omnibox on iOS

References: https://lists.opensuse.org/archives/list/[email protected]/thread/RIUSEIUCWM46Y5M4MDXH3FRV3BSFSGVJ/#RIUSEIUCWM46Y5M4MDXH3FRV3BSFSGVJ, https://bugzilla.suse.com/1137332, https://www.suse.com/security/cve/CVE-2019-5828, https://www.suse.com/security/cve/CVE-2019-5829, https://www.suse.com/security/cve/CVE-2019-5830, https://www.suse.com/security/cve/CVE-2019-5831, https://www.suse.com/security/cve/CVE-2019-5832, https://www.suse.com/security/cve/CVE-2019-5833, https://www.suse.com/security/cve/CVE-2019-5834, https://www.suse.com/security/cve/CVE-2019-5835, https://www.suse.com/security/cve/CVE-2019-5836, https://www.suse.com/security/cve/CVE-2019-5837, https://www.suse.com/security/cve/CVE-2019-5838, https://www.suse.com/security/cve/CVE-2019-5839, https://www.suse.com/security/cve/CVE-2019-5840