openSUSE-SU-2021:1350-1

    Dashboard / Vulnerabilities / openSUSE-SU-2021:1350-1

    openSUSE-SU-2021:1350-1

    Published: 12 Oct 2021Last Modified: 4 Feb 2026

    Summary: Security update for chromium

    Details: This update for chromium fixes the following issues: Chromium 94.0.4606.81 (boo#1191463): * CVE-2021-37977: Use after free in Garbage Collection * CVE-2021-37978: Heap buffer overflow in Blink * CVE-2021-37979: Heap buffer overflow in WebRTC * CVE-2021-37980: Inappropriate implementation in Sandbox Chromium 94.0.4606.54 (boo#1190765): * CVE-2021-37956: Use after free in Offline use * CVE-2021-37957: Use after free in WebGPU * CVE-2021-37958: Inappropriate implementation in Navigation * CVE-2021-37959: Use after free in Task Manager * CVE-2021-37960: Inappropriate implementation in Blink graphics * CVE-2021-37961: Use after free in Tab Strip * CVE-2021-37962: Use after free in Performance Manager * CVE-2021-37963: Side-channel information leakage in DevTools * CVE-2021-37964: Inappropriate implementation in ChromeOS Networking * CVE-2021-37965: Inappropriate implementation in Background Fetch API * CVE-2021-37966: Inappropriate implementation in Compositing * CVE-2021-37967: Inappropriate implementation in Background Fetch API * CVE-2021-37968: Inappropriate implementation in Background Fetch API * CVE-2021-37969: Inappropriate implementation in Google Updater * CVE-2021-37970: Use after free in File System API * CVE-2021-37971: Incorrect security UI in Web Browser UI * CVE-2021-37972: Out of bounds read in libjpeg-turbo Chromium 94.0.4606.61 (boo#1191166): * CVE-2021-37973: Use after free in Portals Chromium 94.0.4606.71 (boo#1191204): * CVE-2021-37974 : Use after free in Safe Browsing * CVE-2021-37975 : Use after free in V8 * CVE-2021-37976 : Information leak in core

    References: https://lists.opensuse.org/archives/list/[email protected]/thread/FGCILKKE7TLKATFOFTDHZ573UHODPDOM/, https://bugzilla.suse.com/1190765, https://bugzilla.suse.com/1191166, https://bugzilla.suse.com/1191204, https://bugzilla.suse.com/1191463, https://www.suse.com/security/cve/CVE-2021-37956, https://www.suse.com/security/cve/CVE-2021-37957, https://www.suse.com/security/cve/CVE-2021-37958, https://www.suse.com/security/cve/CVE-2021-37959, https://www.suse.com/security/cve/CVE-2021-37960, https://www.suse.com/security/cve/CVE-2021-37961, https://www.suse.com/security/cve/CVE-2021-37962, https://www.suse.com/security/cve/CVE-2021-37963, https://www.suse.com/security/cve/CVE-2021-37964, https://www.suse.com/security/cve/CVE-2021-37965, https://www.suse.com/security/cve/CVE-2021-37966, https://www.suse.com/security/cve/CVE-2021-37967, https://www.suse.com/security/cve/CVE-2021-37968, https://www.suse.com/security/cve/CVE-2021-37969, https://www.suse.com/security/cve/CVE-2021-37970, https://www.suse.com/security/cve/CVE-2021-37971, https://www.suse.com/security/cve/CVE-2021-37972, https://www.suse.com/security/cve/CVE-2021-37973, https://www.suse.com/security/cve/CVE-2021-37974, https://www.suse.com/security/cve/CVE-2021-37975, https://www.suse.com/security/cve/CVE-2021-37976, https://www.suse.com/security/cve/CVE-2021-37977, https://www.suse.com/security/cve/CVE-2021-37978, https://www.suse.com/security/cve/CVE-2021-37979, https://www.suse.com/security/cve/CVE-2021-37980

    Affected packages

    Package

    Name: chromium

    Purl: pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2015.2

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -94.0.4606.81-lp152.2.132.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    openSUSE-SU-2021:1350-1 | CVE-DB