openSUSE-SU-2019:0206-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2019:0206-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2019:0206-1
Related
Published
2019-02-18T16:59:22Z
Modified
2019-02-18T16:59:22Z
Summary
Security update for chromium
Details

This update for Chromium to version 72.0.3626.96 fixes the following issues:

Security issues fixed (bsc#1123641 and bsc#1124936):

  • CVE-2019-5784: Inappropriate implementation in V8
  • CVE-2019-5754: Inappropriate implementation in QUIC Networking.
  • CVE-2019-5782: Inappropriate implementation in V8.
  • CVE-2019-5755: Inappropriate implementation in V8.
  • CVE-2019-5756: Use after free in PDFium.
  • CVE-2019-5757: Type Confusion in SVG.
  • CVE-2019-5758: Use after free in Blink.
  • CVE-2019-5759: Use after free in HTML select elements.
  • CVE-2019-5760: Use after free in WebRTC.
  • CVE-2019-5761: Use after free in SwiftShader.
  • CVE-2019-5762: Use after free in PDFium.
  • CVE-2019-5763: Insufficient validation of untrusted input in V8.
  • CVE-2019-5764: Use after free in WebRTC.
  • CVE-2019-5765: Insufficient policy enforcement in the browser.
  • CVE-2019-5766: Insufficient policy enforcement in Canvas.
  • CVE-2019-5767: Incorrect security UI in WebAPKs.
  • CVE-2019-5768: Insufficient policy enforcement in DevTools.
  • CVE-2019-5769: Insufficient validation of untrusted input in Blink.
  • CVE-2019-5770: Heap buffer overflow in WebGL.
  • CVE-2019-5771: Heap buffer overflow in SwiftShader.
  • CVE-2019-5772: Use after free in PDFium.
  • CVE-2019-5773: Insufficient data validation in IndexedDB.
  • CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing.
  • CVE-2019-5775: Insufficient policy enforcement in Omnibox.
  • CVE-2019-5776: Insufficient policy enforcement in Omnibox.
  • CVE-2019-5777: Insufficient policy enforcement in Omnibox.
  • CVE-2019-5778: Insufficient policy enforcement in Extensions.
  • CVE-2019-5779: Insufficient policy enforcement in ServiceWorker.
  • CVE-2019-5780: Insufficient policy enforcement.
  • CVE-2019-5781: Insufficient policy enforcement in Omnibox.

For a full list of changes refer to https://chromereleases.googleblog.com/2019/02/stable-channel-update-for-desktop.html

References

Affected packages

SUSE:Package Hub 12 SP2 / chromium

Package

Name
chromium
Purl
pkg:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2012%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
72.0.3626.96-88.1

Ecosystem specific 

{
    "binaries": [
        {
            "chromedriver": "72.0.3626.96-88.1",
            "chromium": "72.0.3626.96-88.1"
        }
    ]
}