Описание
Security update for chromium
This update for chromium fixes the following issues:
Chromium was updated to 79.0.3945.79 (boo#1158982)
- CVE-2019-13725: Fixed a use after free in Bluetooth
- CVE-2019-13726: Fixed a heap buffer overflow in password manager
- CVE-2019-13727: Fixed an insufficient policy enforcement in WebSockets
- CVE-2019-13728: Fixed an out of bounds write in V8
- CVE-2019-13729: Fixed a use after free in WebSockets
- CVE-2019-13730: Fixed a type Confusion in V8
- CVE-2019-13732: Fixed a use after free in WebAudio
- CVE-2019-13734: Fixed an out of bounds write in SQLite
- CVE-2019-13735: Fixed an out of bounds write in V8
- CVE-2019-13764: Fixed a type Confusion in V8
- CVE-2019-13736: Fixed an integer overflow in PDFium
- CVE-2019-13737: Fixed an insufficient policy enforcement in autocomplete
- CVE-2019-13738: Fixed an insufficient policy enforcement in navigation
- CVE-2019-13739: Fixed an incorrect security UI in Omnibox
- CVE-2019-13740: Fixed an incorrect security UI in sharing
- CVE-2019-13741: Fixed an insufficient validation of untrusted input in Blink
- CVE-2019-13742: Fixed an incorrect security UI in Omnibox
- CVE-2019-13743: Fixed an incorrect security UI in external protocol handling
- CVE-2019-13744: Fixed an insufficient policy enforcement in cookies
- CVE-2019-13745: Fixed an insufficient policy enforcement in audio
- CVE-2019-13746: Fixed an insufficient policy enforcement in Omnibox
- CVE-2019-13747: Fixed an uninitialized Use in rendering
- CVE-2019-13748: Fixed an insufficient policy enforcement in developer tools
- CVE-2019-13749: Fixed an incorrect security UI in Omnibox
- CVE-2019-13750: Fixed an insufficient data validation in SQLite
- CVE-2019-13751: Fixed an uninitialized Use in SQLite
- CVE-2019-13752: Fixed an out of bounds read in SQLite
- CVE-2019-13753: Fixed an out of bounds read in SQLite
- CVE-2019-13754: Fixed an insufficient policy enforcement in extensions
- CVE-2019-13755: Fixed an insufficient policy enforcement in extensions
- CVE-2019-13756: Fixed an incorrect security UI in printing
- CVE-2019-13757: Fixed an incorrect security UI in Omnibox
- CVE-2019-13758: Fixed an insufficient policy enforcement in navigation
- CVE-2019-13759: Fixed an incorrect security UI in interstitials
- CVE-2019-13761: Fixed an incorrect security UI in Omnibox
- CVE-2019-13762: Fixed an insufficient policy enforcement in downloads
- CVE-2019-13763: Fixed an insufficient policy enforcement in payments
Список пакетов
SUSE Package Hub 12 SP3
SUSE Package Hub 15
openSUSE Leap 15.1
Ссылки
- E-Mail link for openSUSE-SU-2019:2692-1
- SUSE Security Ratings
- SUSE Bug 1158982
- SUSE CVE CVE-2019-13725 page
- SUSE CVE CVE-2019-13726 page
- SUSE CVE CVE-2019-13727 page
- SUSE CVE CVE-2019-13728 page
- SUSE CVE CVE-2019-13729 page
- SUSE CVE CVE-2019-13730 page
- SUSE CVE CVE-2019-13732 page
- SUSE CVE CVE-2019-13734 page
- SUSE CVE CVE-2019-13735 page
- SUSE CVE CVE-2019-13736 page
- SUSE CVE CVE-2019-13737 page
- SUSE CVE CVE-2019-13738 page
- SUSE CVE CVE-2019-13739 page
- SUSE CVE CVE-2019-13740 page
- SUSE CVE CVE-2019-13741 page
- SUSE CVE CVE-2019-13742 page
- SUSE CVE CVE-2019-13743 page
Описание
Use-after-free in Bluetooth in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to execute arbitrary code via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13725
- SUSE Bug 1158982
Описание
Buffer overflow in password manager in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to execute arbitrary code via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13726
- SUSE Bug 1158982
Описание
Insufficient policy enforcement in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass same origin policy via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13727
- SUSE Bug 1158982
Описание
Out of bounds write in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13728
- SUSE Bug 1158982
Описание
Use-after-free in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13729
- SUSE Bug 1158982
Описание
Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13730
- SUSE Bug 1158982
Описание
Use-after-free in WebAudio in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13732
- SUSE Bug 1158982
Описание
Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13734
- SUSE Bug 1158982
Описание
Out of bounds write in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13735
- SUSE Bug 1158982
Описание
Integer overflow in PDFium in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
Затронутые продукты
Ссылки
- CVE-2019-13736
- SUSE Bug 1158982
Описание
Insufficient policy enforcement in autocomplete in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13737
- SUSE Bug 1158982
Описание
Insufficient policy enforcement in navigation in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass site isolation via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13738
- SUSE Bug 1158982
Описание
Insufficient policy enforcement in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
Затронутые продукты
Ссылки
- CVE-2019-13739
- SUSE Bug 1158982
Описание
Incorrect security UI in sharing in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13740
- SUSE Bug 1158982
Описание
Insufficient validation of untrusted input in Blink in Google Chrome prior to 79.0.3945.79 allowed a local attacker to bypass same origin policy via crafted clipboard content.
Затронутые продукты
Ссылки
- CVE-2019-13741
- SUSE Bug 1158982
Описание
Incorrect security UI in Omnibox in Google Chrome on iOS prior to 79.0.3945.79 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
Затронутые продукты
Ссылки
- CVE-2019-13742
- SUSE Bug 1158982
Описание
Incorrect security UI in external protocol handling in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to spoof security UI via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13743
- SUSE Bug 1158982
Описание
Insufficient policy enforcement in cookies in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13744
- SUSE Bug 1158982
Описание
Insufficient policy enforcement in audio in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13745
- SUSE Bug 1158982
Описание
Insufficient policy enforcement in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13746
- SUSE Bug 1158982
Описание
Uninitialized data in rendering in Google Chrome on Android prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13747
- SUSE Bug 1158982
Описание
Insufficient policy enforcement in developer tools in Google Chrome prior to 79.0.3945.79 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13748
- SUSE Bug 1158982
Описание
Incorrect security UI in Omnibox in Google Chrome on iOS prior to 79.0.3945.79 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13749
- SUSE Bug 1158982
Описание
Insufficient data validation in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass defense-in-depth measures via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13750
- SUSE Bug 1158982
Описание
Uninitialized data in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13751
- SUSE Bug 1158982
Описание
Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13752
- SUSE Bug 1158982
Описание
Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13753
- SUSE Bug 1158982
Описание
Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13754
- SUSE Bug 1158982
Описание
Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to disable extensions via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13755
- SUSE Bug 1158982
Описание
Incorrect security UI in printing in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13756
- SUSE Bug 1158982
Описание
Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
Затронутые продукты
Ссылки
- CVE-2019-13757
- SUSE Bug 1158982
Описание
Insufficient policy enforcement in navigation in Google Chrome on Android prior to 79.0.3945.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13758
- SUSE Bug 1158982
Описание
Incorrect security UI in interstitials in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13759
- SUSE Bug 1158982
Описание
Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
Затронутые продукты
Ссылки
- CVE-2019-13761
- SUSE Bug 1158982
Описание
Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 79.0.3945.79 allowed a local attacker to spoof downloaded files via local code.
Затронутые продукты
Ссылки
- CVE-2019-13762
- SUSE Bug 1158982
Описание
Insufficient policy enforcement in payments in Google Chrome prior to 79.0.3945.79 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13763
- SUSE Bug 1158982
Описание
Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Затронутые продукты
Ссылки
- CVE-2019-13764
- SUSE Bug 1158982