openSUSE-SU-2026:20183-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20183-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2026:20183-1
Upstream
CVE (14)
Related
CVE (14)
Published
2026-08-31T08:39:48Z
Modified
2026-09-02T11:26:18Z
Summary
Security update for chromium
Details

This update for chromium fixes the following issues:

Changes in chromium:

  • Chromium 144.0.7559.132 (boo#1257650)

    • CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
    • CVE-2026-1862: Type Confusion in V8 in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  • Chromium 144.0.7559.109 (boo#1257404)

    • CVE-2026-1504: Inappropriate implementation in Background Fetch API

  • Chromium 144.0.7559.96 (boo#1257011)

    • CVE-2026-1220: Race in V8

  • update INSTALL.sh to handle the addded tags in the desktop file (boo#1256938)

  • Chromium 144.0.7559.59 (boo#1256614)

    • CVE-2026-0899: Out of bounds memory access in V8
    • CVE-2026-0900: Inappropriate implementation in V8
    • CVE-2026-0901: Inappropriate implementation in Blink
    • CVE-2026-0902: Inappropriate implementation in V8
    • CVE-2026-0903: Insufficient validation of untrusted input in Downloads
    • CVE-2026-0904: Incorrect security UI in Digital Credentials
    • CVE-2026-0905: Insufficient policy enforcement in Network
    • CVE-2026-0906: Incorrect security UI
    • CVE-2026-0907: Incorrect security UI in Split View
    • CVE-2026-0908: Use after free in ANGLE

  • use noopenh264 where available

References

Affected packages

openSUSE:Leap 16.0 / chromium

Package

Name
chromium
Purl
pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
144.0.7559.132-bp160.1.1

Ecosystem specific 

{
    "binaries":  [
        {
            "chromedriver":  "144.0.7559.132-bp160.1.1",
            "chromium":  "144.0.7559.132-bp160.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20183-1.json"