openSUSE-SU-2019:1903-1

See a problem?

Import Source

https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2019:1903-1.json

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2019:1903-1

Related

CVE-2019-5867
CVE-2019-5868

Published

2019-08-15T09:00:40Z

Modified

2019-08-15T09:00:40Z

Summary

Security update for chromium

Details

This update for chromium to verion 76.0.3809.100 fixes the following issues:

CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction (boo#1145242)
CVE-2019-5867: Out-of-bounds read in V8 (boo#1145242).

References

https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2KCOU5LX4R57BYNXB32BPGAVKF7NJFIW/#2KCOU5LX4R57BYNXB32BPGAVKF7NJFIW
https://bugzilla.suse.com/1145242
https://www.suse.com/security/cve/CVE-2019-5867
https://www.suse.com/security/cve/CVE-2019-5868

Affected packages

openSUSE:Leap 15.0 / chromium

Package

Name: chromium
Purl: purl:rpm/suse/chromium&distro=openSUSE%20Leap%2015.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

76.0.3809.100-lp150.229.1

Ecosystem specific

{
    "binaries": [
        {
            "chromedriver": "76.0.3809.100-lp150.229.1",
            "chromium": "76.0.3809.100-lp150.229.1"
        }
    ]
}