openSUSE-SU-2022:10036-1

Dashboard / Vulnerabilities / openSUSE-SU-2022:10036-1

openSUSE-SU-2022:10036-1

Summary: Security update for chromium

Details: This update for chromium fixes the following issues: Chromium 103.0.5060.53 (boo#1200783) * CVE-2022-2156: Use after free in Base * CVE-2022-2157: Use after free in Interest groups * CVE-2022-2158: Type Confusion in V8 * CVE-2022-2160: Insufficient policy enforcement in DevTools * CVE-2022-2161: Use after free in WebApp Provider * CVE-2022-2162: Insufficient policy enforcement in File System API * CVE-2022-2163: Use after free in Cast UI and Toolbar * CVE-2022-2164: Inappropriate implementation in Extensions API * CVE-2022-2165: Insufficient data validation in URL formatting

References: https://lists.opensuse.org/archives/list/[email protected]/thread/SUIIAMNE5ZGO2NZSXKZINOMI3IDGX2NA/, https://bugzilla.suse.com/1200783, https://www.suse.com/security/cve/CVE-2022-2156, https://www.suse.com/security/cve/CVE-2022-2157, https://www.suse.com/security/cve/CVE-2022-2158, https://www.suse.com/security/cve/CVE-2022-2160, https://www.suse.com/security/cve/CVE-2022-2161, https://www.suse.com/security/cve/CVE-2022-2162, https://www.suse.com/security/cve/CVE-2022-2163, https://www.suse.com/security/cve/CVE-2022-2164, https://www.suse.com/security/cve/CVE-2022-2165