openSUSE-SU-2021:1303-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:1303-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2021:1303-1
Related
Published
2021-09-22T18:41:46Z
Modified
2021-09-22T18:41:46Z
Summary
Security update for chromium
Details

This update for chromium fixes the following issues:

Chromium 93.0.4577.63 (boo#1190096):

  • CVE-2021-30606: Use after free in Blink
  • CVE-2021-30607: Use after free in Permissions
  • CVE-2021-30608: Use after free in Web Share
  • CVE-2021-30609: Use after free in Sign-In
  • CVE-2021-30610: Use after free in Extensions API
  • CVE-2021-30611: Use after free in WebRTC
  • CVE-2021-30612: Use after free in WebRTC
  • CVE-2021-30613: Use after free in Base internals
  • CVE-2021-30614: Heap buffer overflow in TabStrip
  • CVE-2021-30615: Cross-origin data leak in Navigation
  • CVE-2021-30616: Use after free in Media
  • CVE-2021-30617: Policy bypass in Blink
  • CVE-2021-30618: Inappropriate implementation in DevTools
  • CVE-2021-30619: UI Spoofing in Autofill
  • CVE-2021-30620: Insufficient policy enforcement in Blink
  • CVE-2021-30621: UI Spoofing in Autofill
  • CVE-2021-30622: Use after free in WebApp Installs
  • CVE-2021-30623: Use after free in Bookmarks
  • CVE-2021-30624: Use after free in Autofill

Chromium 93.0.4577.82 (boo#1190476):

  • CVE-2021-30625: Use after free in Selection API
  • CVE-2021-30626: Out of bounds memory access in ANGLE
  • CVE-2021-30627: Type Confusion in Blink layout
  • CVE-2021-30628: Stack buffer overflow in ANGLE
  • CVE-2021-30629: Use after free in Permissions
  • CVE-2021-30630: Inappropriate implementation in Blink
  • CVE-2021-30631: Type Confusion in Blink layout
  • CVE-2021-30632: Out of bounds write in V8
  • CVE-2021-30633: Use after free in Indexed DB API
References

Affected packages

openSUSE:Leap 15.2 / chromium

Package

Name
chromium
Purl
pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2015.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
93.0.4577.82-lp152.2.125.1

Ecosystem specific 

{
    "binaries": [
        {
            "chromedriver": "93.0.4577.82-lp152.2.125.1",
            "chromium": "93.0.4577.82-lp152.2.125.1"
        }
    ]
}