SUSE 5053 Published by

A chromium security update has been released for SUSE Linux Enterprise 15 SP4.

openSUSE-SU-2022:10035-1: important: Security update for chromium

openSUSE Security Update: Security update for chromium

Announcement ID: openSUSE-SU-2022:10035-1
Rating: important
References: #1200783
Cross-References: CVE-2022-2156 CVE-2022-2157 CVE-2022-2158
CVE-2022-2160 CVE-2022-2161 CVE-2022-2162
CVE-2022-2163 CVE-2022-2164 CVE-2022-2165

Affected Products:
openSUSE Backports SLE-15-SP4

An update that fixes 9 vulnerabilities is now available.


This update for chromium fixes the following issues:

Chromium 103.0.5060.53 (boo#1200783)

* CVE-2022-2156: Use after free in Base
* CVE-2022-2157: Use after free in Interest groups
* CVE-2022-2158: Type Confusion in V8
* CVE-2022-2160: Insufficient policy enforcement in DevTools
* CVE-2022-2161: Use after free in WebApp Provider
* CVE-2022-2162: Insufficient policy enforcement in File System API
* CVE-2022-2163: Use after free in Cast UI and Toolbar
* CVE-2022-2164: Inappropriate implementation in Extensions API
* CVE-2022-2165: Insufficient data validation in URL formatting

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP4:

zypper in -t patch openSUSE-2022-10035=1

Package List:

- openSUSE Backports SLE-15-SP4 (aarch64 x86_64):