openSUSE-SU-2019:2694-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2019:2694-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2019:2694-1
Related
Published
2019-12-18T09:15:54Z
Modified
2019-12-18T09:15:54Z
Summary
Security update for chromium
Details

This update for chromium fixes the following issues:

Chromium was updated to 79.0.3945.79 (boo#1158982)

  • CVE-2019-13725: Fixed a use after free in Bluetooth
  • CVE-2019-13726: Fixed a heap buffer overflow in password manager
  • CVE-2019-13727: Fixed an insufficient policy enforcement in WebSockets
  • CVE-2019-13728: Fixed an out of bounds write in V8
  • CVE-2019-13729: Fixed a use after free in WebSockets
  • CVE-2019-13730: Fixed a type Confusion in V8
  • CVE-2019-13732: Fixed a use after free in WebAudio
  • CVE-2019-13734: Fixed an out of bounds write in SQLite
  • CVE-2019-13735: Fixed an out of bounds write in V8
  • CVE-2019-13764: Fixed a type Confusion in V8
  • CVE-2019-13736: Fixed an integer overflow in PDFium
  • CVE-2019-13737: Fixed an insufficient policy enforcement in autocomplete
  • CVE-2019-13738: Fixed an insufficient policy enforcement in navigation
  • CVE-2019-13739: Fixed an incorrect security UI in Omnibox
  • CVE-2019-13740: Fixed an incorrect security UI in sharing
  • CVE-2019-13741: Fixed an insufficient validation of untrusted input in Blink
  • CVE-2019-13742: Fixed an incorrect security UI in Omnibox
  • CVE-2019-13743: Fixed an incorrect security UI in external protocol handling
  • CVE-2019-13744: Fixed an insufficient policy enforcement in cookies
  • CVE-2019-13745: Fixed an insufficient policy enforcement in audio
  • CVE-2019-13746: Fixed an insufficient policy enforcement in Omnibox
  • CVE-2019-13747: Fixed an uninitialized Use in rendering
  • CVE-2019-13748: Fixed an insufficient policy enforcement in developer tools
  • CVE-2019-13749: Fixed an incorrect security UI in Omnibox
  • CVE-2019-13750: Fixed an insufficient data validation in SQLite
  • CVE-2019-13751: Fixed an uninitialized Use in SQLite
  • CVE-2019-13752: Fixed an out of bounds read in SQLite
  • CVE-2019-13753: Fixed an out of bounds read in SQLite
  • CVE-2019-13754: Fixed an insufficient policy enforcement in extensions
  • CVE-2019-13755: Fixed an insufficient policy enforcement in extensions
  • CVE-2019-13756: Fixed an incorrect security UI in printing
  • CVE-2019-13757: Fixed an incorrect security UI in Omnibox
  • CVE-2019-13758: Fixed an insufficient policy enforcement in navigation
  • CVE-2019-13759: Fixed an incorrect security UI in interstitials
  • CVE-2019-13761: Fixed an incorrect security UI in Omnibox
  • CVE-2019-13762: Fixed an insufficient policy enforcement in downloads
  • CVE-2019-13763: Fixed an insufficient policy enforcement in payments

This update was imported from the openSUSE:Leap:15.1:Update update project.

References

Affected packages

SUSE:Package Hub 15 SP1 / chromium

Package

Name
chromium
Purl
purl:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2015%20SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
79.0.3945.79-bp151.3.35.1

Ecosystem specific 

{
    "binaries": [
        {
            "chromedriver": "79.0.3945.79-bp151.3.35.1",
            "chromium": "79.0.3945.79-bp151.3.35.1"
        }
    ]
}