Bug 1155643 – VUL-0: chromium: multiple security issues fixed in 78.0.3904.87

Bug 1155643 - VUL-0: chromium: multiple security issues fixed in 78.0.3904.87


Summary:	VUL-0: chromium: multiple security issues fixed in 78.0.3904.87

Status:	RESOLVED FIXED

Classification:	openSUSE
Product:	openSUSE Distribution
Classification:	openSUSE
Component:	Security
Version:	Leap 15.1
Hardware:	Other Other

Priority:	P3 - Medium Severity: Major (vote)
Target Milestone:	---
Assigned To:	Security Team bot
QA Contact:	E-mail List

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Create test case

Clone This Bug

Reported:	2019-11-01 11:03 UTC by Tomáš Chvátal
Modified:	2019-11-07 07:46 UTC (History)
CC List:	1 user (show)

See Also:
Found By:	Corporate Interoperability Test
Services Priority:
Business Priority:
Blocker:	---
Marketing QA Status:	---
IT Deployment:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Tomáš Chvátal 2019-11-01 11:03:54 UTC

+++ This bug was initially created as a clone of Bug #1154806 +++

https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_31.html

Fixed in 78.0.3904.87:
High CVE-2019-13721: Use-after-free in PDFium.
High CVE-2019-13720: Use-after-free in audio.

Comment 1 Swamp Workflow Management 2019-11-01 12:30:12 UTC

This is an autogenerated message for OBS integration:
This bug (1155643) was mentioned in
https://build.opensuse.org/request/show/744734 Factory / chromium
https://build.opensuse.org/request/show/744737 15.1 / chromium
https://build.opensuse.org/request/show/744738 15.0 / chromium

Comment 2 Marcus Meissner 2019-11-02 19:00:12 UTC

released

Comment 3 Swamp Workflow Management 2019-11-02 23:14:15 UTC

openSUSE-SU-2019:2421-1: An update that fixes two vulnerabilities is now available.

Category: security (important)
Bug References: 1155643
CVE References: CVE-2019-13720,CVE-2019-13721
Sources used:
openSUSE Leap 15.1 (src):    chromium-78.0.3904.87-lp151.2.42.1
openSUSE Leap 15.0 (src):    chromium-78.0.3904.87-lp150.251.1

Comment 4 Swamp Workflow Management 2019-11-03 23:14:21 UTC

openSUSE-SU-2019:2426-1: An update that fixes two vulnerabilities is now available.

Category: security (important)
Bug References: 1155643
CVE References: CVE-2019-13720,CVE-2019-13721
Sources used:
openSUSE Backports SLE-15 (src):    chromium-78.0.3904.87-bp150.243.1

Comment 5 Swamp Workflow Management 2019-11-04 12:40:10 UTC

This is an autogenerated message for OBS integration:
This bug (1155643) was mentioned in
https://build.opensuse.org/request/show/745163 Backports:SLE-12-SP3 / chromium

Comment 6 Swamp Workflow Management 2019-11-04 14:11:37 UTC

openSUSE-SU-2019:2427-1: An update that fixes two vulnerabilities is now available.

Category: security (important)
Bug References: 1155643
CVE References: CVE-2019-13720,CVE-2019-13721
Sources used:
openSUSE Backports SLE-15-SP1 (src):    chromium-78.0.3904.87-bp151.3.25.1

Comment 7 Swamp Workflow Management 2019-11-06 23:12:49 UTC

openSUSE-SU-2019:2447-1: An update that fixes 86 vulnerabilities is now available.

Category: security (important)
Bug References: 1143492,1144625,1145242,1146219,1149143,1150425,1151229,1153660,1154806,1155643
CVE References: CVE-2019-13659,CVE-2019-13660,CVE-2019-13661,CVE-2019-13662,CVE-2019-13663,CVE-2019-13664,CVE-2019-13665,CVE-2019-13666,CVE-2019-13667,CVE-2019-13668,CVE-2019-13669,CVE-2019-13670,CVE-2019-13671,CVE-2019-13673,CVE-2019-13674,CVE-2019-13675,CVE-2019-13676,CVE-2019-13677,CVE-2019-13678,CVE-2019-13679,CVE-2019-13680,CVE-2019-13681,CVE-2019-13682,CVE-2019-13683,CVE-2019-13685,CVE-2019-13686,CVE-2019-13687,CVE-2019-13688,CVE-2019-13693,CVE-2019-13694,CVE-2019-13695,CVE-2019-13696,CVE-2019-13697,CVE-2019-13699,CVE-2019-13700,CVE-2019-13701,CVE-2019-13702,CVE-2019-13703,CVE-2019-13704,CVE-2019-13705,CVE-2019-13706,CVE-2019-13707,CVE-2019-13708,CVE-2019-13709,CVE-2019-13710,CVE-2019-13711,CVE-2019-13713,CVE-2019-13714,CVE-2019-13715,CVE-2019-13716,CVE-2019-13717,CVE-2019-13718,CVE-2019-13719,CVE-2019-13720,CVE-2019-13721,CVE-2019-15903,CVE-2019-5850,CVE-2019-5851,CVE-2019-5852,CVE-2019-5853,CVE-2019-5854,CVE-2019-5855,CVE-2019-5856,CVE-2019-5857,CVE-2019-5858,CVE-2019-5859,CVE-2019-5860,CVE-2019-5861,CVE-2019-5862,CVE-2019-5863,CVE-2019-5864,CVE-2019-5865,CVE-2019-5867,CVE-2019-5868,CVE-2019-5869,CVE-2019-5870,CVE-2019-5871,CVE-2019-5872,CVE-2019-5874,CVE-2019-5875,CVE-2019-5876,CVE-2019-5877,CVE-2019-5878,CVE-2019-5879,CVE-2019-5880,CVE-2019-5881
Sources used:
SUSE Package Hub for SUSE Linux Enterprise 12 (src):    chromium-78.0.3904.87-10.1