Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2016:2793-1

Опубликовано: 14 нояб. 2016
Источник: suse-cvrf

Описание

Security update for Chromium

This update to Chromium 54.0.2840.100 fixes the following vulnerabilities:

  • CVE-2016-5199: Heap corruption in FFmpeg (boo#1009892)
  • CVE-2016-5200: out of bounds memory access in v8 (boo#1009893)
  • CVE-2016-5201: info leak in extensions (boo#1009894)
  • CVE-2016-5202: various fixes from internal audits (boo#1009895)

Список пакетов

openSUSE Leap 42.1
chromedriver-54.0.2840.100-91.1
chromium-54.0.2840.100-91.1
chromium-ffmpegsumo-54.0.2840.100-91.1
openSUSE Leap 42.2
chromedriver-54.0.2840.100-91.1
chromium-54.0.2840.100-91.1
chromium-ffmpegsumo-54.0.2840.100-91.1

Описание

An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted video file.


Затронутые продукты
openSUSE Leap 42.1:chromedriver-54.0.2840.100-91.1
openSUSE Leap 42.1:chromium-54.0.2840.100-91.1
openSUSE Leap 42.1:chromium-ffmpegsumo-54.0.2840.100-91.1
openSUSE Leap 42.2:chromedriver-54.0.2840.100-91.1

Ссылки

Описание

V8 in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android incorrectly applied type rules, which allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Затронутые продукты
openSUSE Leap 42.1:chromedriver-54.0.2840.100-91.1
openSUSE Leap 42.1:chromium-54.0.2840.100-91.1
openSUSE Leap 42.1:chromium-ffmpegsumo-54.0.2840.100-91.1
openSUSE Leap 42.2:chromedriver-54.0.2840.100-91.1

Ссылки

Описание

A leak of privateClass in the extensions API in Google Chrome prior to 54.0.2840.100 for Linux, and 54.0.2840.99 for Windows, and 54.0.2840.98 for Mac allowed a remote attacker to access privileged JavaScript code via a crafted HTML page.


Затронутые продукты
openSUSE Leap 42.1:chromedriver-54.0.2840.100-91.1
openSUSE Leap 42.1:chromium-54.0.2840.100-91.1
openSUSE Leap 42.1:chromium-ffmpegsumo-54.0.2840.100-91.1
openSUSE Leap 42.2:chromedriver-54.0.2840.100-91.1

Ссылки

Описание

browser/extensions/api/dial/dial_registry.cc in Google Chrome before 54.0.2840.98 on macOS, before 54.0.2840.99 on Windows, and before 54.0.2840.100 on Linux neglects to copy a device ID before an erase() call, which causes the erase operation to access data that that erase operation will destroy.


Затронутые продукты
openSUSE Leap 42.1:chromedriver-54.0.2840.100-91.1
openSUSE Leap 42.1:chromium-54.0.2840.100-91.1
openSUSE Leap 42.1:chromium-ffmpegsumo-54.0.2840.100-91.1
openSUSE Leap 42.2:chromedriver-54.0.2840.100-91.1

Ссылки