openSUSE Security Update: Security update for chromium
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2019:1558-1
Rating:             important
References:         #1137332 
Cross-References:   CVE-2019-5828 CVE-2019-5829 CVE-2019-5830
                    CVE-2019-5831 CVE-2019-5832 CVE-2019-5833
                    CVE-2019-5834 CVE-2019-5835 CVE-2019-5836
                    CVE-2019-5837 CVE-2019-5838 CVE-2019-5839
                    CVE-2019-5840
Affected Products:
                    openSUSE Leap 15.0
______________________________________________________________________________

   An update that fixes 13 vulnerabilities is now available.

Description:

   This update for chromium to version 75.0.3770.80 fixes the following
   issues:

   Security issues fixed:

   - CVE-2019-5828: Fixed a Use after free in ServiceWorker
   - CVE-2019-5829: Fixed Use after free in Download Manager
   - CVE-2019-5830: Fixed an incorrectly credentialed requests in CORS
   - CVE-2019-5831: Fixed an incorrect map processing in V8
   - CVE-2019-5832: Fixed an incorrect CORS handling in XHR
   - CVE-2019-5833: Fixed an inconsistent security UI placemen
   - CVE-2019-5835: Fixed an out of bounds read in Swiftshader
   - CVE-2019-5836: Fixed a heap buffer overflow in Angle
   - CVE-2019-5837: Fixed a cross-origin resources size disclosure in Appcache
   - CVE-2019-5838: Fixed an overly permissive tab access in Extensions
   - CVE-2019-5839: Fixed an incorrect handling of certain code points in
     Blink
   - CVE-2019-5840: Fixed a popup blocker bypass


Patch Instructions:

   To install this openSUSE Security Update use the SUSE recommended
 installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - openSUSE Leap 15.0:

      zypper in -t patch openSUSE-2019-1558=1



Package List:

   - openSUSE Leap 15.0 (x86_64):

      chromedriver-75.0.3770.80-lp150.215.1
      chromedriver-debuginfo-75.0.3770.80-lp150.215.1
      chromium-75.0.3770.80-lp150.215.1
      chromium-debuginfo-75.0.3770.80-lp150.215.1
      chromium-debugsource-75.0.3770.80-lp150.215.1


References:

   https://www.suse.com/security/cve/CVE-2019-5828.html
   https://www.suse.com/security/cve/CVE-2019-5829.html
   https://www.suse.com/security/cve/CVE-2019-5830.html
   https://www.suse.com/security/cve/CVE-2019-5831.html
   https://www.suse.com/security/cve/CVE-2019-5832.html
   https://www.suse.com/security/cve/CVE-2019-5833.html
   https://www.suse.com/security/cve/CVE-2019-5834.html
   https://www.suse.com/security/cve/CVE-2019-5835.html
   https://www.suse.com/security/cve/CVE-2019-5836.html
   https://www.suse.com/security/cve/CVE-2019-5837.html
   https://www.suse.com/security/cve/CVE-2019-5838.html
   https://www.suse.com/security/cve/CVE-2019-5839.html
   https://www.suse.com/security/cve/CVE-2019-5840.html
   https://bugzilla.suse.com/1137332

-- 
To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org