OPENSUSE-SU-2021:0898-1: Security update for chromium

02 / AFFECTED SOFTWARE

Affected packages

openSUSE:Leap 15.2 chromium

03 / CONNECTIONS

Connected vulnerabilities

related CVE-2021-30554

related CVE-2021-30555

related CVE-2021-30556

related CVE-2021-30557

upstream CVE-2021-30554

upstream CVE-2021-30555

upstream CVE-2021-30556

upstream CVE-2021-30557

04 / EVIDENCE

Source records

Open Source Vulnerabilities openSUSE-SU-2021:0898-1

This update for chromium fixes the following issues: Chromium 91.0.4472.114 (boo#1187481) * CVE-2021-30554: Use after free in WebGL * CVE-2021-30555: Use after free in Sharing * CVE-2021-30556: Use after free in WebAudio * CVE-2021-30557: Use after free in TabGroups Chromium 91.0.4472.106 * Fix use-after-free in SendTabToSelfSubMenuModel * Destroy system-token NSSCertDatabase on the IO thread

View original source

05 / REFERENCES

Further evidence

https://bugzilla.suse.com/1187481
https://lists.opensuse.org/archives/list/[email protected]/thread/JRQS6E56EGURN6VSX6LRCTP5WHICGNXR/
https://www.suse.com/security/cve/CVE-2021-30554
https://www.suse.com/security/cve/CVE-2021-30555
https://www.suse.com/security/cve/CVE-2021-30556
https://www.suse.com/security/cve/CVE-2021-30557