openSUSE-SU-2026:22118-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22118-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2026:22118-1
Upstream
CVE (37)
  • CVE-2026-110136
  • CVE-2026-110137
  • CVE-2026-110138
  • CVE-2026-110139
  • CVE-2026-110140
  • CVE-2026-110141
  • CVE-2026-110142
  • CVE-2026-110143
  • CVE-2026-110144
  • CVE-2026-110145
  • CVE-2026-110146
  • CVE-2026-110147
  • CVE-2026-110148
  • CVE-2026-110149
  • CVE-2026-110150
  • CVE-2026-110151
  • CVE-2026-110152
  • CVE-2026-110153
  • CVE-2026-110154
  • CVE-2026-110155
  • CVE-2026-110156
  • CVE-2026-110157
  • CVE-2026-110158
  • CVE-2026-110159
  • CVE-2026-110160
  • CVE-2026-110161
  • CVE-2026-110162
  • CVE-2026-110163
  • CVE-2026-110164
  • CVE-2026-110165
  • CVE-2026-110166
  • CVE-2026-110167
  • CVE-2026-110168
  • CVE-2026-110169
  • CVE-2026-110170
  • CVE-2026-110171
  • CVE-2026-110172
Related
Published
2026-10-16T17:03:44Z
Modified
2026-10-19T17:23:15Z
Summary
Security update for chromium
Details

This update for chromium fixes the following issues:

Changes in chromium:

  • Chromium 155.0.8059.79 (boo#1285401):
    • CVE-2026-110152: Buffer overflow in ANGLE
    • CVE-2026-110149: Use after free in Browser
    • CVE-2026-110136: Use after free in PDF
    • CVE-2026-110161: Use after free in Network
    • CVE-2026-110165: Use after free in Core
    • CVE-2026-110148: Use after free in SVG
    • CVE-2026-110151: Use after free in Media
    • CVE-2026-110162: Use after free in Desktop
    • CVE-2026-110170: Use after free in Bindings
    • CVE-2026-110160: Missing authorization in ReadingMode
    • CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk
    • CVE-2026-110146: Information leak in Passwords
    • CVE-2026-110150: Privilege elevation in Installer
    • CVE-2026-110156: Incorrect reference resolution in Extensions
    • CVE-2026-110137: Use after free in WebRTC
    • CVE-2026-110140: Type confusion in V8
    • CVE-2026-110158: Use after free in Passwords
    • CVE-2026-110145: Use after free in Passwords
    • CVE-2026-110159: Incorrect authorization in Updater
    • CVE-2026-110144: Incorrect authorization in Mojo
    • CVE-2026-110153: Use after free in Media
    • CVE-2026-110166: Buffer overflow in Animation
    • CVE-2026-110169: Use after free in V8
    • CVE-2026-110168: Use after free in V8
    • CVE-2026-110139: Use after free in Media
    • CVE-2026-110172: Use after free in Media
    • CVE-2026-110164: Use after free in DOM
    • CVE-2026-110163: Use after free in DOM
    • CVE-2026-110141: Observable discrepancy in Media
    • CVE-2026-110138: Use after free in ShapeDetection
    • CVE-2026-110157: Use after free in SVG
    • CVE-2026-110147: Use after free in PDF
    • CVE-2026-110154: Use after free in Canvas
    • CVE-2026-110155: Buffer overflow in PDFium
    • CVE-2026-110167: Use after free in Media
    • CVE-2026-110171: Use after free in Media
    • CVE-2026-110142: Use after free in FileSystem
References

Affected packages

openSUSE:Leap 16.0 / chromium

Package

Name
chromium
Purl
pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
155.0.8059.79-bp160.1.1

Ecosystem specific

{
    "binaries":  [
        {
            "chromedriver":  "155.0.8059.79-bp160.1.1",
            "chromium":  "155.0.8059.79-bp160.1.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22118-1.json"