Login
Newsletter
Werbung

Sicherheit: Mehrere Probleme in chromium
Aktuelle Meldungen Distributionen
Name: Mehrere Probleme in chromium
ID: openSUSE-SU-2020:1206-1
Distribution: SUSE
Plattformen: SUSE openSUSE Leap 15.1, SUSE openSUSE Leap 15.2
Datum: Fr, 14. August 2020, 22:10
Referenzen: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6550
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6548
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6554
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6542
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6552
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6549
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6555
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6547
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6545
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6544
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6543
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6551
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6546
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6553
Applikationen: Chromium

Originalnachricht

   openSUSE Security Update: Security update for chromium
______________________________________________________________________________

Announcement ID: openSUSE-SU-2020:1206-1
Rating: important
References: #1174497 #1175044 #1175085
Cross-References: CVE-2020-6542 CVE-2020-6543 CVE-2020-6544
CVE-2020-6545 CVE-2020-6546 CVE-2020-6547
CVE-2020-6548 CVE-2020-6549 CVE-2020-6550
CVE-2020-6551 CVE-2020-6552 CVE-2020-6553
CVE-2020-6554 CVE-2020-6555
Affected Products:
openSUSE Leap 15.2
openSUSE Leap 15.1
______________________________________________________________________________

An update that fixes 14 vulnerabilities is now available.

Description:

This update for chromium fixes the following issues:

- Chromium updated to 84.0.4147.125 (boo#1175085)
* CVE-2020-6542: Use after free in ANGLE
* CVE-2020-6543: Use after free in task scheduling
* CVE-2020-6544: Use after free in media
* CVE-2020-6545: Use after free in audio
* CVE-2020-6546: Inappropriate implementation in installer
* CVE-2020-6547: Incorrect security UI in media
* CVE-2020-6548: Heap buffer overflow in Skia
* CVE-2020-6549: Use after free in media
* CVE-2020-6550: Use after free in IndexedDB
* CVE-2020-6551: Use after free in WebXR
* CVE-2020-6552: Use after free in Blink
* CVE-2020-6553: Use after free in offline mode
* CVE-2020-6554: Use after free in extensions
* CVE-2020-6555: Out of bounds read in WebGL
* Various fixes from internal audits, fuzzing and other initiatives

- Disable wayland everywhere as it breaks headless and middle mouse copy
everywhere: boo#1174497 boo#1175044


Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended
installation methods
like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 15.2:

zypper in -t patch openSUSE-2020-1206=1

- openSUSE Leap 15.1:

zypper in -t patch openSUSE-2020-1206=1



Package List:

- openSUSE Leap 15.2 (x86_64):

chromedriver-84.0.4147.125-lp152.2.12.2
chromedriver-debuginfo-84.0.4147.125-lp152.2.12.2
chromium-84.0.4147.125-lp152.2.12.2
chromium-debuginfo-84.0.4147.125-lp152.2.12.2
chromium-debugsource-84.0.4147.125-lp152.2.12.2

- openSUSE Leap 15.1 (x86_64):

chromedriver-84.0.4147.125-lp151.2.115.1
chromedriver-debuginfo-84.0.4147.125-lp151.2.115.1
chromium-84.0.4147.125-lp151.2.115.1
chromium-debuginfo-84.0.4147.125-lp151.2.115.1
chromium-debugsource-84.0.4147.125-lp151.2.115.1


References:

https://www.suse.com/security/cve/CVE-2020-6542.html
https://www.suse.com/security/cve/CVE-2020-6543.html
https://www.suse.com/security/cve/CVE-2020-6544.html
https://www.suse.com/security/cve/CVE-2020-6545.html
https://www.suse.com/security/cve/CVE-2020-6546.html
https://www.suse.com/security/cve/CVE-2020-6547.html
https://www.suse.com/security/cve/CVE-2020-6548.html
https://www.suse.com/security/cve/CVE-2020-6549.html
https://www.suse.com/security/cve/CVE-2020-6550.html
https://www.suse.com/security/cve/CVE-2020-6551.html
https://www.suse.com/security/cve/CVE-2020-6552.html
https://www.suse.com/security/cve/CVE-2020-6553.html
https://www.suse.com/security/cve/CVE-2020-6554.html
https://www.suse.com/security/cve/CVE-2020-6555.html
https://bugzilla.suse.com/1174497
https://bugzilla.suse.com/1175044
https://bugzilla.suse.com/1175085

--
To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung