openSUSE-SU-2026:21561-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21561-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2026:21561-1
Upstream
CVE (41)
  • CVE-2026-19137
  • CVE-2026-19138
  • CVE-2026-19139
  • CVE-2026-19140
  • CVE-2026-19141
  • CVE-2026-19142
  • CVE-2026-19143
  • CVE-2026-19144
  • CVE-2026-19145
  • CVE-2026-19146
  • CVE-2026-19147
  • CVE-2026-19148
  • CVE-2026-19149
  • CVE-2026-19150
  • CVE-2026-19151
  • CVE-2026-19152
  • CVE-2026-19153
  • CVE-2026-19154
  • CVE-2026-19155
  • CVE-2026-19156
  • CVE-2026-19157
  • CVE-2026-19158
  • CVE-2026-19159
  • CVE-2026-19160
  • CVE-2026-19161
  • CVE-2026-19162
  • CVE-2026-19163
  • CVE-2026-19164
  • CVE-2026-19165
  • CVE-2026-19166
  • CVE-2026-19167
  • CVE-2026-19168
  • CVE-2026-19169
  • CVE-2026-19170
  • CVE-2026-19171
  • CVE-2026-19172
  • CVE-2026-19173
  • CVE-2026-19174
  • CVE-2026-19175
  • CVE-2026-19176
  • CVE-2026-19177
Related
Published
2026-08-11T10:58:58Z
Modified
2026-08-12T18:23:42Z
Summary
Security update for chromium
Details

This update for chromium fixes the following issues:

Changes in chromium:

  • Chromium 151.0.7922.108 (boo#1274549):
    • CVE-2026-19137: Use after free in WebGL
    • CVE-2026-19149: Use after free in Aura
    • CVE-2026-19154: Use after free in Skia
    • CVE-2026-19157: Out of bounds write in ANGLE
    • CVE-2026-19170: Use after free in WebGL
    • CVE-2026-19172: Use after free in Views
    • CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks
    • CVE-2026-19168: Inappropriate implementation in V8
    • CVE-2026-19138: Heap buffer overflow in CrashReporting
    • CVE-2026-19139: Race in CredentialProvider
    • CVE-2026-19140: Use after free in GPU
    • CVE-2026-19141: Use after free in Resources
    • CVE-2026-19142: Use after free in Views
    • CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs
    • CVE-2026-19144: Use after free in HTML
    • CVE-2026-19145: Use after free in Translate
    • CVE-2026-19146: Uninitialized Use in GPU
    • CVE-2026-19147: Use after free in Aura
    • CVE-2026-19148: Out of bounds write in GPU
    • CVE-2026-19150: Inappropriate implementation in V8
    • CVE-2026-19151: Use after free in V8
    • CVE-2026-19152: Inappropriate implementation in Navigation
    • CVE-2026-19153: Insufficient validation of untrusted input in Workers
    • CVE-2026-19155: Use after free in Payments
    • CVE-2026-19156: Heap buffer overflow in Base
    • CVE-2026-19158: Use after free in Views
    • CVE-2026-19159: Use after free in Views
    • CVE-2026-19160: Uninitialized Use in Skia
    • CVE-2026-19161: Uninitialized Use in Skia
    • CVE-2026-19162: Out of bounds write in V8
    • CVE-2026-19163: Use after free in Media
    • CVE-2026-19164: Insufficient validation of untrusted input in Codecs
    • CVE-2026-19165: Use after free in Extensions
    • CVE-2026-19166: Use after free in Web Authentication
    • CVE-2026-19167: Integer overflow in GPU
    • CVE-2026-19171: Use after free in Media
    • CVE-2026-19173: Out of bounds write in Skia
    • CVE-2026-19174: Integer overflow in V8
    • CVE-2026-19175: Use after free in Payments
    • CVE-2026-19176: Use after free in Skia
    • CVE-2026-19177: Insufficient validation of untrusted input in UI
References

Affected packages

openSUSE:Leap 16.0 / chromium

Package

Name
chromium
Purl
pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
151.0.7922.108-bp160.1.1

Ecosystem specific

{
    "binaries":  [
        {
            "chromedriver":  "151.0.7922.108-bp160.1.1",
            "chromium":  "151.0.7922.108-bp160.1.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21561-1.json"