Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2019:2420-1

Опубликовано: 01 нояб. 2019
Источник: suse-cvrf

Описание

Security update for chromium, re2

This update for chromium, re2 fixes the following issues:

Chromium was updated to 78.0.3904.70 boo#1154806:

  • CVE-2019-13699: Use-after-free in media
  • CVE-2019-13700: Buffer overrun in Blink
  • CVE-2019-13701: URL spoof in navigation
  • CVE-2019-13702: Privilege elevation in Installer
  • CVE-2019-13703: URL bar spoofing
  • CVE-2019-13704: CSP bypass
  • CVE-2019-13705: Extension permission bypass
  • CVE-2019-13706: Out-of-bounds read in PDFium
  • CVE-2019-13707: File storage disclosure
  • CVE-2019-13708: HTTP authentication spoof
  • CVE-2019-13709: File download protection bypass
  • CVE-2019-13710: File download protection bypass
  • CVE-2019-13711: Cross-context information leak
  • CVE-2019-15903: Buffer overflow in expat
  • CVE-2019-13713: Cross-origin data leak
  • CVE-2019-13714: CSS injection
  • CVE-2019-13715: Address bar spoofing
  • CVE-2019-13716: Service worker state error
  • CVE-2019-13717: Notification obscured
  • CVE-2019-13718: IDN spoof
  • CVE-2019-13719: Notification obscured
  • Various fixes from internal audits, fuzzing and other initiatives
  • Use internal resources for icon and appdata

Список пакетов

openSUSE Leap 15.0
chromedriver-78.0.3904.70-lp151.2.39.1
chromium-78.0.3904.70-lp151.2.39.1
libre2-0-20190901-lp151.10.3.1
libre2-0-32bit-20190901-lp151.10.3.1
re2-devel-20190901-lp151.10.3.1
openSUSE Leap 15.1
chromedriver-78.0.3904.70-lp151.2.39.1
chromium-78.0.3904.70-lp151.2.39.1
libre2-0-20190901-lp151.10.3.1
libre2-0-32bit-20190901-lp151.10.3.1
re2-devel-20190901-lp151.10.3.1

Ссылки

Описание

Use after free in media in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.


Затронутые продукты
openSUSE Leap 15.0:chromedriver-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:chromium-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:libre2-0-20190901-lp151.10.3.1
openSUSE Leap 15.0:libre2-0-32bit-20190901-lp151.10.3.1

Ссылки

Описание

Out of bounds memory access in the gamepad API in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.


Затронутые продукты
openSUSE Leap 15.0:chromedriver-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:chromium-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:libre2-0-20190901-lp151.10.3.1
openSUSE Leap 15.0:libre2-0-32bit-20190901-lp151.10.3.1

Ссылки

Описание

Incorrect implementation in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.


Затронутые продукты
openSUSE Leap 15.0:chromedriver-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:chromium-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:libre2-0-20190901-lp151.10.3.1
openSUSE Leap 15.0:libre2-0-32bit-20190901-lp151.10.3.1

Ссылки

Описание

Inappropriate implementation in installer in Google Chrome on Windows prior to 78.0.3904.70 allowed a local attacker to perform privilege escalation via a crafted executable.


Затронутые продукты
openSUSE Leap 15.0:chromedriver-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:chromium-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:libre2-0-20190901-lp151.10.3.1
openSUSE Leap 15.0:libre2-0-32bit-20190901-lp151.10.3.1

Ссылки

Описание

Insufficient policy enforcement in the Omnibox in Google Chrome on Android prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.


Затронутые продукты
openSUSE Leap 15.0:chromedriver-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:chromium-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:libre2-0-20190901-lp151.10.3.1
openSUSE Leap 15.0:libre2-0-32bit-20190901-lp151.10.3.1

Ссылки

Описание

Insufficient policy enforcement in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass content security policy via a crafted HTML page.


Затронутые продукты
openSUSE Leap 15.0:chromedriver-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:chromium-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:libre2-0-20190901-lp151.10.3.1
openSUSE Leap 15.0:libre2-0-32bit-20190901-lp151.10.3.1

Ссылки

Описание

Insufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension.


Затронутые продукты
openSUSE Leap 15.0:chromedriver-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:chromium-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:libre2-0-20190901-lp151.10.3.1
openSUSE Leap 15.0:libre2-0-32bit-20190901-lp151.10.3.1

Ссылки

Описание

Out of bounds memory access in PDFium in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.


Затронутые продукты
openSUSE Leap 15.0:chromedriver-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:chromium-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:libre2-0-20190901-lp151.10.3.1
openSUSE Leap 15.0:libre2-0-32bit-20190901-lp151.10.3.1

Ссылки

Описание

Insufficient validation of untrusted input in intents in Google Chrome on Android prior to 78.0.3904.70 allowed a local attacker to leak files via a crafted application.


Затронутые продукты
openSUSE Leap 15.0:chromedriver-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:chromium-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:libre2-0-20190901-lp151.10.3.1
openSUSE Leap 15.0:libre2-0-32bit-20190901-lp151.10.3.1

Ссылки

Описание

Inappropriate implementation in navigation in Google Chrome on iOS prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.


Затронутые продукты
openSUSE Leap 15.0:chromedriver-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:chromium-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:libre2-0-20190901-lp151.10.3.1
openSUSE Leap 15.0:libre2-0-32bit-20190901-lp151.10.3.1

Ссылки

Описание

Insufficient policy enforcement in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass download restrictions via a crafted HTML page.


Затронутые продукты
openSUSE Leap 15.0:chromedriver-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:chromium-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:libre2-0-20190901-lp151.10.3.1
openSUSE Leap 15.0:libre2-0-32bit-20190901-lp151.10.3.1

Ссылки

Описание

Insufficient validation of untrusted input in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass download restrictions via a crafted HTML page.


Затронутые продукты
openSUSE Leap 15.0:chromedriver-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:chromium-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:libre2-0-20190901-lp151.10.3.1
openSUSE Leap 15.0:libre2-0-32bit-20190901-lp151.10.3.1

Ссылки

Описание

Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page.


Затронутые продукты
openSUSE Leap 15.0:chromedriver-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:chromium-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:libre2-0-20190901-lp151.10.3.1
openSUSE Leap 15.0:libre2-0-32bit-20190901-lp151.10.3.1

Ссылки

Описание

Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page.


Затронутые продукты
openSUSE Leap 15.0:chromedriver-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:chromium-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:libre2-0-20190901-lp151.10.3.1
openSUSE Leap 15.0:libre2-0-32bit-20190901-lp151.10.3.1

Ссылки

Описание

Insufficient validation of untrusted input in Color Enhancer extension in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to inject CSS into an HTML page via a crafted URL.


Затронутые продукты
openSUSE Leap 15.0:chromedriver-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:chromium-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:libre2-0-20190901-lp151.10.3.1
openSUSE Leap 15.0:libre2-0-32bit-20190901-lp151.10.3.1

Ссылки

Описание

Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.


Затронутые продукты
openSUSE Leap 15.0:chromedriver-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:chromium-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:libre2-0-20190901-lp151.10.3.1
openSUSE Leap 15.0:libre2-0-32bit-20190901-lp151.10.3.1

Ссылки

Описание

Insufficient policy enforcement in service workers in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.


Затронутые продукты
openSUSE Leap 15.0:chromedriver-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:chromium-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:libre2-0-20190901-lp151.10.3.1
openSUSE Leap 15.0:libre2-0-32bit-20190901-lp151.10.3.1

Ссылки

Описание

Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page.


Затронутые продукты
openSUSE Leap 15.0:chromedriver-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:chromium-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:libre2-0-20190901-lp151.10.3.1
openSUSE Leap 15.0:libre2-0-32bit-20190901-lp151.10.3.1

Ссылки

Описание

Insufficient data validation in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.


Затронутые продукты
openSUSE Leap 15.0:chromedriver-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:chromium-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:libre2-0-20190901-lp151.10.3.1
openSUSE Leap 15.0:libre2-0-32bit-20190901-lp151.10.3.1

Ссылки

Описание

Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page.


Затронутые продукты
openSUSE Leap 15.0:chromedriver-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:chromium-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:libre2-0-20190901-lp151.10.3.1
openSUSE Leap 15.0:libre2-0-32bit-20190901-lp151.10.3.1

Ссылки

Описание

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.


Затронутые продукты
openSUSE Leap 15.0:chromedriver-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:chromium-78.0.3904.70-lp151.2.39.1
openSUSE Leap 15.0:libre2-0-20190901-lp151.10.3.1
openSUSE Leap 15.0:libre2-0-32bit-20190901-lp151.10.3.1

Ссылки