Overview Details

File _patchinfo of Package patchinfo

<patchinfo incident="chromium">
  <packager>AndreasStieger</packager>
  <issue tracker="bnc" id="996032">openSUSE Tumbleweed 20160826: Chromium crashes systematically when loading certain web pages</issue>
  <issue tracker="bnc" id="99606">Changing GCVs on Driverset properties doesnt dirty the model</issue>
  <issue tracker="bnc" id="995932">Chromium 52 crashes when trying to open page</issue>
  <issue tracker="bnc" id="996648">VUL-0: chromium: multiple vulnerabilities fixed in 53.0.2785.89</issue>
  <issue tracker="cve" id="2016-5147"></issue>
  <issue tracker="cve" id="2016-5148"></issue>
  <issue tracker="cve" id="2016-5149"></issue>
  <issue tracker="cve" id="2016-5150"></issue>
  <issue tracker="cve" id="2016-5151"></issue>
  <issue tracker="cve" id="2016-5152"></issue>
  <issue tracker="cve" id="2016-5153"></issue>
  <issue tracker="cve" id="2016-5154"></issue>
  <issue tracker="cve" id="2016-5155"></issue>
  <issue tracker="cve" id="2016-5156"></issue>
  <issue tracker="cve" id="2016-5157"></issue>
  <issue tracker="cve" id="2016-5158"></issue>
  <issue tracker="cve" id="2016-5159"></issue>
  <issue tracker="cve" id="2016-5160"></issue>
  <issue tracker="cve" id="2016-5161"></issue>
  <issue tracker="cve" id="2016-5162"></issue>
  <issue tracker="cve" id="2016-5163"></issue>
  <issue tracker="cve" id="2016-5164"></issue>
  <issue tracker="cve" id="2016-5165"></issue>
  <issue tracker="cve" id="2016-5166"></issue>
  <issue tracker="bnc" id="969732">rpmlint fails with MemoryError (on 32bit builds)</issue>
  <issue tracker="cve" id="2016-5139"></issue>
  <issue tracker="cve" id="2016-5140"></issue>
  <issue tracker="cve" id="2016-5141"></issue>
  <issue tracker="cve" id="2016-5142"></issue>
  <issue tracker="cve" id="2016-5143"></issue>
  <issue tracker="cve" id="2016-5144"></issue>
  <issue tracker="cve" id="2016-5145"></issue>
  <issue tracker="cve" id="2016-5146"></issue>
  <issue tracker="bnc" id="992305">VUL-0: chromium: 52.0.2743.116 security release</issue>
  <issue tracker="bnc" id="992309">VUL-0: CVE-2016-5146: chromium: various fixes from internal audits</issue>
  <issue tracker="bnc" id="992310">VUL-0: CVE-2016-5140: chromium: Heap overflow in pdfium</issue>
  <issue tracker="bnc" id="992311">VUL-0: CVE-2016-5139: chromium: Heap overflow in pdfium</issue>
  <issue tracker="bnc" id="992313">VUL-0: CVE-2016-5142: chromium: Use-after-free in Blink</issue>
  <issue tracker="bnc" id="992314">VUL-0: CVE-2016-5141: chromium: Address bar spoofing</issue>
  <issue tracker="bnc" id="992315">VUL-0: CVE-2016-5144: chromium: Parameter sanitization failure in DevTools</issue>
  <issue tracker="bnc" id="992319">VUL-0: CVE-2016-5143: chromium: Parameter sanitization failure in DevTools</issue>
  <issue tracker="bnc" id="992320">VUL-0: CVE-2016-5145: chromium: Same origin bypass for images in Blink</issue>
  <issue tracker="bnc" id="998328">chromium-53.0.2785.89-68.1 disabled widevine</issue>
  <issue tracker="bnc" id="998743">VUL-0: chromium: multiple vulnerabilities fixed in 53.0.2785.113</issue>
  <issue tracker="cve" id="2016-5170"></issue>
  <issue tracker="cve" id="2016-5171"></issue>
  <issue tracker="cve" id="2016-5172"></issue>
  <issue tracker="cve" id="2016-5173"></issue>
  <issue tracker="cve" id="2016-5174"></issue>
  <issue tracker="cve" id="2016-5175"></issue>
  <category>security</category>
  <rating>important</rating>
  <summary>Security update for Chromium</summary>
  <description>Chromium was updated to 53.0.2785.116 to fix a number of security issus.
    
The following vulnerabilities were fixed in 53.0.2785.113 (boo#992305):

- CVE-2016-5170: Use after free in Blink
- CVE-2016-5171: Use after free in Blink
- CVE-2016-5172: Arbitrary Memory Read in v8
- CVE-2016-5173: Extension resource access
- CVE-2016-5174: Popup not correctly suppressed
- CVE-2016-5175: Various fixes from internal audits, fuzzing and other initiatives.    
    
The following vulnerabilities were fixed in 53.0.2785.89 (boo#996648):

- CVE-2016-5147: Universal XSS in Blink.
- CVE-2016-5148: Universal XSS in Blink.
- CVE-2016-5149: Script injection in extensions.
- CVE-2016-5150: Use after free in Blink.
- CVE-2016-5151: Use after free in PDFium.
- CVE-2016-5152: Heap overflow in PDFium.
- CVE-2016-5153: Use after destruction in Blink.
- CVE-2016-5154: Heap overflow in PDFium.
- CVE-2016-5155: Address bar spoofing.
- CVE-2016-5156: Use after free in event bindings.
- CVE-2016-5157: Heap overflow in PDFium.
- CVE-2016-5158: Heap overflow in PDFium.
- CVE-2016-5159: Heap overflow in PDFium.
- CVE-2016-5161: Type confusion in Blink.
- CVE-2016-5162: Extensions web accessible resources bypass.
- CVE-2016-5163: Address bar spoofing.
- CVE-2016-5164: Universal XSS using DevTools.
- CVE-2016-5165: Script injection in DevTools.
- CVE-2016-5166: SMB Relay Attack via Save Page As.
- CVE-2016-5160: Extensions web accessible resources bypass.

The following security issues were fixed in 52.0.2743.116(boo#992305)

- CVE-2016-5141: Address bar spoofing (boo#992314)
- CVE-2016-5142: Use-after-free in Blink (boo#992313)
- CVE-2016-5139: Heap overflow in pdfium (boo#992311)
- CVE-2016-5140: Heap overflow in pdfium (boo#992310)
- CVE-2016-5145: Same origin bypass for images in Blink (boo#992320)
- CVE-2016-5143: Parameter sanitization failure in DevTools (boo#992319)
- CVE-2016-5144: Parameter sanitization failure in DevTools (boo#992315)
- CVE-2016-5146: Various fixes from internal audits, fuzzing and other initiatives (boo#992309)
    
A number of tracked build system fixes are included. (boo#996032, boo#99606, boo#995932)

rpmlint and rpmlint-mini were updated to work around a memory exhaustion problem with this package on 32 bit (boo#969732).</description>
</patchinfo>
openSUSE Build Service is sponsored by
Places