OPENSUSE-SU-2021:1600-1: Security update for chromium

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Package Hub 15 SP3 chromium

openSUSE:Leap 15.3 chromium

03 / CONNECTIONS

Connected vulnerabilities

related CVE-2021-4098

related CVE-2021-4099

related CVE-2021-4100

related CVE-2021-4101

related CVE-2021-4102

upstream CVE-2021-4098

upstream CVE-2021-4099

upstream CVE-2021-4100

upstream CVE-2021-4101

upstream CVE-2021-4102

04 / EVIDENCE

Source records

Open Source Vulnerabilities openSUSE-SU-2021:1600-1

This update for chromium fixes the following issues: Chromium 96.0.4664.110 (boo#1193713): * CVE-2021-4098: Insufficient data validation in Mojo * CVE-2021-4099: Use after free in Swiftshader * CVE-2021-4100: Object lifecycle issue in ANGLE * CVE-2021-4101: Heap buffer overflow in Swiftshader * CVE-2021-4102: Use after free in V8

View original source

05 / REFERENCES

Further evidence

https://bugzilla.suse.com/1193713
https://lists.opensuse.org/archives/list/[email protected]/thread/LGS65TJIBHZIF3QKXXU62A2KR5NRUCPQ/
https://www.suse.com/security/cve/CVE-2021-4098
https://www.suse.com/security/cve/CVE-2021-4099
https://www.suse.com/security/cve/CVE-2021-4100
https://www.suse.com/security/cve/CVE-2021-4101
https://www.suse.com/security/cve/CVE-2021-4102