Security update for chromium
This update for chromium fixes the following issues: -chromium was updated to 86.0.4240.75 (boo#1177408): - CVE-2020-15967: Fixed Use after free in payments. - CVE-2020-15968: Fixed Use after free in Blink. - CVE-2020-15969: Fixed Use after free in WebRTC. - CVE-2020-15970: Fixed Use after free in NFC. - CVE-2020-15971: Fixed Use after free in printing. - CVE-2020-15972: Fixed Use after free in audio. - CVE-2020-15990: Fixed Use after free in autofill. - CVE-2020-15991: Fixed Use after free in password manager. - CVE-2020-15973: Fixed Insufficient policy enforcement in extensions. - CVE-2020-15974: Fixed Integer overflow in Blink. - CVE-2020-15975: Fixed Integer overflow in SwiftShader. - CVE-2020-15976: Fixed Use after free in WebXR. - CVE-2020-6557: Fixed Inappropriate implementation in networking. - CVE-2020-15977: Fixed Insufficient data validation in dialogs. - CVE-2020-15978: Fixed Insufficient data validation in navigation. - CVE-2020-15979: Fixed Inappropriate implementation in V8. - CVE-2020-15980: Fixed Insufficient policy enforcement in Intents. - CVE-2020-15981: Fixed Out of bounds read in audio. - CVE-2020-15982: Fixed Side-channel information leakage in cache. - CVE-2020-15983: Fixed Insufficient data validation in webUI. - CVE-2020-15984: Fixed Insufficient policy enforcement in Omnibox. - CVE-2020-15985: Fixed Inappropriate implementation in Blink. - CVE-2020-15986: Fixed Integer overflow in media. - CVE-2020-15987: Fixed Use after free in WebRTC. - CVE-2020-15992: Fixed Insufficient policy enforcement in networking. - CVE-2020-15988: Fixed Insufficient policy enforcement in downloads. - CVE-2020-15989: Fixed Uninitialized Use in PDFium. This update was imported from the openSUSE:Leap:15.1:Update update project.
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for chromium fixes the following issues: -chromium was updated to 86.0.4240.75 (boo#1177408): - CVE-2020-15967: Fixed Use after free in payments. - CVE-2020-15968: Fixed Use after free in Blink. - CVE-2020-15969: Fixed Use after free in WebRTC. - CVE-2020-15970: Fixed Use after free in NFC. - CVE-2020-15971: Fixed Use after free in printing. - CVE-2020-15972: Fixed Use after free in audio. - CVE-2020-15990: Fixed Use after free in autofill. - CVE-2020-15991: Fixed Use after free in password manager. - CVE-2020-15973: Fixed Insufficient policy enforcement in extensions. - CVE-2020-15974: Fixed Integer overflow in Blink. - CVE-2020-15975: Fixed Integer overflow in SwiftShader. - CVE-2020-15976: Fixed Use after free in WebXR. - CVE-2020-6557: Fixed Inappropriate implementation in networking. - CVE-2020-15977: Fixed Insufficient data validation in dialogs. - CVE-2020-15978: Fixed Insufficient data validation in navigation. - CVE-2020-15979: Fixed Inappropriate implementation in V8. - CVE-2020-15980: Fixed Insufficient policy enforcement in Intents. - CVE-2020-15981: Fixed Out of bounds read in audio. - CVE-2020-15982: Fixed Side-channel information leakage in cache. - CVE-2020-15983: Fixed Insufficient data validation in webUI. - CVE-2020-15984: Fixed Insufficient policy enforcement in Omnibox. - CVE-2020-15985: Fixed Inappropriate implementation in Blink. - CVE-2020-15986: Fixed Integer overflow in media. - CVE-2020-15987: Fixed Use after free in WebRTC. - CVE-2020-15992: Fixed Insufficient policy enforcement in networking. - CVE-2020-15988: Fixed Insufficient policy enforcement in downloads. - CVE-2020-15989: Fixed Uninitialized Use in PDFium. This update was imported from the openSUSE:Leap:15.1:Update update project.
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1177408
- https://lists.opensuse.org/archives/list/[email protected]/thread/7SPENP4DSO2RHCGDP36WTNMPXQSGB2TO/
- https://www.suse.com/security/cve/CVE-2020-15967
- https://www.suse.com/security/cve/CVE-2020-15968
- https://www.suse.com/security/cve/CVE-2020-15969
- https://www.suse.com/security/cve/CVE-2020-15970
- https://www.suse.com/security/cve/CVE-2020-15971
- https://www.suse.com/security/cve/CVE-2020-15972
- https://www.suse.com/security/cve/CVE-2020-15973
- https://www.suse.com/security/cve/CVE-2020-15974
- https://www.suse.com/security/cve/CVE-2020-15975
- https://www.suse.com/security/cve/CVE-2020-15976
- https://www.suse.com/security/cve/CVE-2020-15977
- https://www.suse.com/security/cve/CVE-2020-15978
- https://www.suse.com/security/cve/CVE-2020-15979
- https://www.suse.com/security/cve/CVE-2020-15980
- https://www.suse.com/security/cve/CVE-2020-15981
- https://www.suse.com/security/cve/CVE-2020-15982
- https://www.suse.com/security/cve/CVE-2020-15983
- https://www.suse.com/security/cve/CVE-2020-15984
- https://www.suse.com/security/cve/CVE-2020-15985
- https://www.suse.com/security/cve/CVE-2020-15986
- https://www.suse.com/security/cve/CVE-2020-15987
- https://www.suse.com/security/cve/CVE-2020-15988
- https://www.suse.com/security/cve/CVE-2020-15989
- https://www.suse.com/security/cve/CVE-2020-15990
- https://www.suse.com/security/cve/CVE-2020-15991
- https://www.suse.com/security/cve/CVE-2020-15992
- https://www.suse.com/security/cve/CVE-2020-6557