Security update for Chromium
Chromium was updated to 52.0.2743.116 to fix the following security issues: (boo#992305) - CVE-2016-5141: Address bar spoofing (boo#992314) - CVE-2016-5142: Use-after-free in Blink (boo#992313) - CVE-2016-5139: Heap overflow in pdfium (boo#992311) - CVE-2016-5140: Heap overflow in pdfium (boo#992310) - CVE-2016-5145: Same origin bypass for images in Blink (boo#992320) - CVE-2016-5143: Parameter sanitization failure in DevTools (boo#992319) - CVE-2016-5144: Parameter sanitization failure in DevTools (boo#992315) - CVE-2016-5146: Various fixes from internal audits, fuzzing and other initiatives (boo#992309)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Chromium was updated to 52.0.2743.116 to fix the following security issues: (boo#992305) - CVE-2016-5141: Address bar spoofing (boo#992314) - CVE-2016-5142: Use-after-free in Blink (boo#992313) - CVE-2016-5139: Heap overflow in pdfium (boo#992311) - CVE-2016-5140: Heap overflow in pdfium (boo#992310) - CVE-2016-5145: Same origin bypass for images in Blink (boo#992320) - CVE-2016-5143: Parameter sanitization failure in DevTools (boo#992319) - CVE-2016-5144: Parameter sanitization failure in DevTools (boo#992315) - CVE-2016-5146: Various fixes from internal audits, fuzzing and other initiatives (boo#992309)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/992305
- https://bugzilla.suse.com/992309
- https://bugzilla.suse.com/992310
- https://bugzilla.suse.com/992311
- https://bugzilla.suse.com/992313
- https://bugzilla.suse.com/992314
- https://bugzilla.suse.com/992315
- https://bugzilla.suse.com/992319
- https://bugzilla.suse.com/992320
- https://lists.opensuse.org/archives/list/[email protected]/thread/NYQEG22WWDWBWP62EHVKSBZ23VETP5RQ/#NYQEG22WWDWBWP62EHVKSBZ23VETP5RQ
- https://www.suse.com/security/cve/CVE-2016-5139
- https://www.suse.com/security/cve/CVE-2016-5140
- https://www.suse.com/security/cve/CVE-2016-5141
- https://www.suse.com/security/cve/CVE-2016-5142
- https://www.suse.com/security/cve/CVE-2016-5143
- https://www.suse.com/security/cve/CVE-2016-5144
- https://www.suse.com/security/cve/CVE-2016-5145
- https://www.suse.com/security/cve/CVE-2016-5146