Security update for chromium
This update for chromium fixes the following issues: - Update to 87.0.4280.66 (boo#1178923) - Wayland support by default - CVE-2020-16018: Use after free in payments. - CVE-2020-16019: Inappropriate implementation in filesystem. - CVE-2020-16020: Inappropriate implementation in cryptohome. - CVE-2020-16021: Race in ImageBurner. - CVE-2020-16022: Insufficient policy enforcement in networking. - CVE-2020-16015: Insufficient data validation in WASM. R - CVE-2020-16014: Use after free in PPAPI. - CVE-2020-16023: Use after free in WebCodecs. - CVE-2020-16024: Heap buffer overflow in UI. - CVE-2020-16025: Heap buffer overflow in clipboard. - CVE-2020-16026: Use after free in WebRTC. - CVE-2020-16027: Insufficient policy enforcement in developer tools. R - CVE-2020-16028: Heap buffer overflow in WebRTC. - CVE-2020-16029: Inappropriate implementation in PDFium. - CVE-2020-16030: Insufficient data validation in Blink. - CVE-2019-8075: Insufficient data validation in Flash. - CVE-2020-16031: Incorrect security UI in tab preview. - CVE-2020-16032: Incorrect security UI in sharing. - CVE-2020-16033: Incorrect security UI in WebUSB. - CVE-2020-16034: Inappropriate implementation in WebRTC. - CVE-2020-16035: Insufficient data validation in cros-disks. - CVE-2020-16012: Side-channel information leakage in graphics. - CVE-2020-16036: Inappropriate implementation in cookies.
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for chromium fixes the following issues: - Update to 87.0.4280.66 (boo#1178923) - Wayland support by default - CVE-2020-16018: Use after free in payments. - CVE-2020-16019: Inappropriate implementation in filesystem. - CVE-2020-16020: Inappropriate implementation in cryptohome. - CVE-2020-16021: Race in ImageBurner. - CVE-2020-16022: Insufficient policy enforcement in networking. - CVE-2020-16015: Insufficient data validation in WASM. R - CVE-2020-16014: Use after free in PPAPI. - CVE-2020-16023: Use after free in WebCodecs. - CVE-2020-16024: Heap buffer overflow in UI. - CVE-2020-16025: Heap buffer overflow in clipboard. - CVE-2020-16026: Use after free in WebRTC. - CVE-2020-16027: Insufficient policy enforcement in developer tools. R - CVE-2020-16028: Heap buffer overflow in WebRTC. - CVE-2020-16029: Inappropriate implementation in PDFium. - CVE-2020-16030: Insufficient data validation in Blink. - CVE-2019-8075: Insufficient data validation in Flash. - CVE-2020-16031: Incorrect security UI in tab preview. - CVE-2020-16032: Incorrect security UI in sharing. - CVE-2020-16033: Incorrect security UI in WebUSB. - CVE-2020-16034: Inappropriate implementation in WebRTC. - CVE-2020-16035: Insufficient data validation in cros-disks. - CVE-2020-16012: Side-channel information leakage in graphics. - CVE-2020-16036: Inappropriate implementation in cookies.
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1178923
- https://lists.opensuse.org/archives/list/[email protected]/thread/FVE6T2JL6PI433CTW6BAFC3ROZDJMVMC/
- https://www.suse.com/security/cve/CVE-2019-8075
- https://www.suse.com/security/cve/CVE-2020-16012
- https://www.suse.com/security/cve/CVE-2020-16014
- https://www.suse.com/security/cve/CVE-2020-16015
- https://www.suse.com/security/cve/CVE-2020-16018
- https://www.suse.com/security/cve/CVE-2020-16019
- https://www.suse.com/security/cve/CVE-2020-16020
- https://www.suse.com/security/cve/CVE-2020-16021
- https://www.suse.com/security/cve/CVE-2020-16022
- https://www.suse.com/security/cve/CVE-2020-16023
- https://www.suse.com/security/cve/CVE-2020-16024
- https://www.suse.com/security/cve/CVE-2020-16025
- https://www.suse.com/security/cve/CVE-2020-16026
- https://www.suse.com/security/cve/CVE-2020-16027
- https://www.suse.com/security/cve/CVE-2020-16028
- https://www.suse.com/security/cve/CVE-2020-16029
- https://www.suse.com/security/cve/CVE-2020-16030
- https://www.suse.com/security/cve/CVE-2020-16031
- https://www.suse.com/security/cve/CVE-2020-16032
- https://www.suse.com/security/cve/CVE-2020-16033
- https://www.suse.com/security/cve/CVE-2020-16034
- https://www.suse.com/security/cve/CVE-2020-16035
- https://www.suse.com/security/cve/CVE-2020-16036