openSUSE Build Service

File _patchinfo of Package patchinfo

<patchinfo incident="9613">
<issue tracker="bnc" id="1123641">VUL-0: chromium: 72.0.3626.81 update</issue>
<issue tracker="bnc" id="1124936">VUL-0: chromium: 72.0.3626.96 update</issue>
  <issue tracker="cve" id="2019-5766"/>
  <issue tracker="cve" id="2019-5767"/>
  <issue tracker="cve" id="2019-5764"/>
  <issue tracker="cve" id="2019-5765"/>
  <issue tracker="cve" id="2019-5762"/>
  <issue tracker="cve" id="2019-5763"/>
  <issue tracker="cve" id="2019-5760"/>
  <issue tracker="cve" id="2019-5761"/>
  <issue tracker="cve" id="2019-5768"/>
  <issue tracker="cve" id="2019-5769"/>
  <issue tracker="cve" id="2019-5759"/>
  <issue tracker="cve" id="2019-5758"/>
  <issue tracker="cve" id="2019-5757"/>
  <issue tracker="cve" id="2019-5756"/>
  <issue tracker="cve" id="2019-5755"/>
  <issue tracker="cve" id="2019-5754"/>
  <issue tracker="cve" id="2019-5775"/>
  <issue tracker="cve" id="2019-5774"/>
  <issue tracker="cve" id="2019-5777"/>
  <issue tracker="cve" id="2019-5776"/>
  <issue tracker="cve" id="2019-5771"/>
  <issue tracker="cve" id="2019-5770"/>
  <issue tracker="cve" id="2019-5773"/>
  <issue tracker="cve" id="2019-5772"/>
  <issue tracker="cve" id="2019-5779"/>
  <issue tracker="cve" id="2019-5778"/>
  <issue tracker="cve" id="2019-5780"/>
  <issue tracker="cve" id="2019-5781"/>
  <issue tracker="cve" id="2019-5782"/>
  <issue tracker="cve" id="2019-5784"/>
  <category>security</category>
  <rating>important</rating>
  <packager>scarabeus_iv</packager>
  <description>This update for Chromium to version 72.0.3626.96 fixes the following issues:

Security issues fixed (bsc#1123641 and bsc#1124936):

- CVE-2019-5784: Inappropriate implementation in V8 
- CVE-2019-5754: Inappropriate implementation in QUIC Networking.
- CVE-2019-5782: Inappropriate implementation in V8.
- CVE-2019-5755: Inappropriate implementation in V8.
- CVE-2019-5756: Use after free in PDFium.
- CVE-2019-5757: Type Confusion in SVG.
- CVE-2019-5758: Use after free in Blink.
- CVE-2019-5759: Use after free in HTML select elements.
- CVE-2019-5760: Use after free in WebRTC.
- CVE-2019-5761: Use after free in SwiftShader.
- CVE-2019-5762: Use after free in PDFium.
- CVE-2019-5763: Insufficient validation of untrusted input in V8.
- CVE-2019-5764: Use after free in WebRTC.
- CVE-2019-5765: Insufficient policy enforcement in the browser.
- CVE-2019-5766: Insufficient policy enforcement in Canvas.
- CVE-2019-5767: Incorrect security UI in WebAPKs.
- CVE-2019-5768: Insufficient policy enforcement in DevTools.
- CVE-2019-5769: Insufficient validation of untrusted input in Blink.
- CVE-2019-5770: Heap buffer overflow in WebGL.
- CVE-2019-5771: Heap buffer overflow in SwiftShader.
- CVE-2019-5772: Use after free in PDFium.
- CVE-2019-5773: Insufficient data validation in IndexedDB.
- CVE-2019-5774: Insufficient validation of untrusted input in SafeBrowsing.
- CVE-2019-5775: Insufficient policy enforcement in Omnibox.
- CVE-2019-5776: Insufficient policy enforcement in Omnibox.
- CVE-2019-5777: Insufficient policy enforcement in Omnibox.
- CVE-2019-5778: Insufficient policy enforcement in Extensions.
- CVE-2019-5779: Insufficient policy enforcement in ServiceWorker.
- CVE-2019-5780: Insufficient policy enforcement.
- CVE-2019-5781: Insufficient policy enforcement in Omnibox.

For a full list of changes refer to https://chromereleases.googleblog.com/2019/02/stable-channel-update-for-desktop.html
  </description>
  <summary>Security update for chromium</summary>
</patchinfo>
Places

File _patchinfo of Package patchinfo

Places
