Bug ID | 1137332 |
---|---|
Summary | VUL-0: chromium: multiple security issues fixed in 75.0.3770.80 |
Classification | openSUSE |
Product | openSUSE Distribution |
Version | Leap 15.1 |
Hardware | Other |
OS | Other |
Status | NEW |
Severity | Major |
Priority | P5 - None |
Component | Security |
Assignee | tchvatal@suse.com |
Reporter | Andreas.Stieger@gmx.de |
QA Contact | qa-bugs@suse.de |
CC | security-team@suse.de |
Found By | Community User |
Blocker | --- |
https://chromereleases.googleblog.com/2019/06/stable-channel-update-for-desktop.html Fixed in Chromium 75.0.3770.80: CVE-2019-5828: Use after free in ServiceWorker CVE-2019-5829: Use after free in Download Manager CVE-2019-5830: Incorrectly credentialed requests in CORS CVE-2019-5831: Incorrect map processing in V8 CVE-2019-5832: Incorrect CORS handling in XHR CVE-2019-5833: Inconsistent security UI placemen CVE-2019-5835: Out of bounds read in Swiftshader CVE-2019-5836: Heap buffer overflow in Angle CVE-2019-5837: Cross-origin resources size disclosure in Appcache CVE-2019-5838: Overly permissive tab access in Extensions CVE-2019-5839: Incorrect handling of certain code points in Blink CVE-2019-5840: Popup blocker bypass Various fixes from internal audits, fuzzing and other initiatives Other platforms: CVE-2019-5834: URL spoof in Omnibox on iOS