openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10036-1 Rating: important References: #1200783 Cross-References: CVE-2022-2156 CVE-2022-2157 CVE-2022-2158 CVE-2022-2160 CVE-2022-2161 CVE-2022-2162 CVE-2022-2163 CVE-2022-2164 CVE-2022-2165 Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium 103.0.5060.53 (boo#1200783) * CVE-2022-2156: Use after free in Base * CVE-2022-2157: Use after free in Interest groups * CVE-2022-2158: Type Confusion in V8 * CVE-2022-2160: Insufficient policy enforcement in DevTools * CVE-2022-2161: Use after free in WebApp Provider * CVE-2022-2162: Insufficient policy enforcement in File System API * CVE-2022-2163: Use after free in Cast UI and Toolbar * CVE-2022-2164: Inappropriate implementation in Extensions API * CVE-2022-2165: Insufficient data validation in URL formatting Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-10036=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 x86_64): chromedriver-103.0.5060.53-bp153.2.104.1 chromium-103.0.5060.53-bp153.2.104.1 References: https://www.suse.com/security/cve/CVE-2022-2156.html https://www.suse.com/security/cve/CVE-2022-2157.html https://www.suse.com/security/cve/CVE-2022-2158.html https://www.suse.com/security/cve/CVE-2022-2160.html https://www.suse.com/security/cve/CVE-2022-2161.html https://www.suse.com/security/cve/CVE-2022-2162.html https://www.suse.com/security/cve/CVE-2022-2163.html https://www.suse.com/security/cve/CVE-2022-2164.html https://www.suse.com/security/cve/CVE-2022-2165.html https://bugzilla.suse.com/1200783