Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2016-9652
Vulnerability from cvelistv5
Published
2019-11-20 14:56
Modified
2024-08-06 02:59
Severity ?
EPSS score ?
Summary
Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-06T02:59:03.328Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "http://www.debian.org/security/2016/dsa-3731", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "http://www.securityfocus.com/bid/94633", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "http://rhn.redhat.com/errata/RHSA-2016-2919.html", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LV2U7SINGF3SBK7HVKSWFOYLQBUH6PUE/", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7LGZO2VOGJOZUUXNQITD6YMIUQ2L5GTU/", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://security.gentoo.org/glsa/201612-11", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "http://www.ubuntu.com/usn/USN-3153-1", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZECS3A7ULG4B4YXBKUZMA3NTQBE5HGU/", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://bugs.chromium.org/p/chromium/issues/detail?id=669928", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "Chrome", vendor: "Google", versions: [ { status: "affected", version: "55.0", }, ], }, ], descriptions: [ { lang: "en", value: "Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.", }, ], problemTypes: [ { descriptions: [ { description: "mixed", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2020-02-07T20:20:04", orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", shortName: "Chrome", }, references: [ { tags: [ "x_refsource_CONFIRM", ], url: "https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html", }, { tags: [ "x_refsource_MISC", ], url: "http://www.debian.org/security/2016/dsa-3731", }, { tags: [ "x_refsource_MISC", ], url: "http://www.securityfocus.com/bid/94633", }, { tags: [ "x_refsource_MISC", ], url: "http://rhn.redhat.com/errata/RHSA-2016-2919.html", }, { tags: [ "x_refsource_MISC", ], url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LV2U7SINGF3SBK7HVKSWFOYLQBUH6PUE/", }, { tags: [ "x_refsource_MISC", ], url: "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html", }, { tags: [ "x_refsource_MISC", ], url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7LGZO2VOGJOZUUXNQITD6YMIUQ2L5GTU/", }, { tags: [ "x_refsource_MISC", ], url: "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html", }, { tags: [ "x_refsource_MISC", ], url: "https://security.gentoo.org/glsa/201612-11", }, { tags: [ "x_refsource_MISC", ], url: "http://www.ubuntu.com/usn/USN-3153-1", }, { tags: [ "x_refsource_MISC", ], url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZECS3A7ULG4B4YXBKUZMA3NTQBE5HGU/", }, { tags: [ "x_refsource_CONFIRM", ], url: "https://bugs.chromium.org/p/chromium/issues/detail?id=669928", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "security@google.com", ID: "CVE-2016-9652", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "Chrome", version: { version_data: [ { version_value: "55.0", }, ], }, }, ], }, vendor_name: "Google", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "mixed", }, ], }, ], }, references: { reference_data: [ { name: "https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html", refsource: "CONFIRM", url: "https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html", }, { name: "http://www.debian.org/security/2016/dsa-3731", refsource: "MISC", url: "http://www.debian.org/security/2016/dsa-3731", }, { name: "http://www.securityfocus.com/bid/94633", refsource: "MISC", url: "http://www.securityfocus.com/bid/94633", }, { name: "http://rhn.redhat.com/errata/RHSA-2016-2919.html", refsource: "MISC", url: "http://rhn.redhat.com/errata/RHSA-2016-2919.html", }, { name: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LV2U7SINGF3SBK7HVKSWFOYLQBUH6PUE/", refsource: "MISC", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LV2U7SINGF3SBK7HVKSWFOYLQBUH6PUE/", }, { name: "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html", refsource: "MISC", url: "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html", }, { name: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7LGZO2VOGJOZUUXNQITD6YMIUQ2L5GTU/", refsource: "MISC", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7LGZO2VOGJOZUUXNQITD6YMIUQ2L5GTU/", }, { name: "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html", refsource: "MISC", url: "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html", }, { name: "https://security.gentoo.org/glsa/201612-11", refsource: "MISC", url: "https://security.gentoo.org/glsa/201612-11", }, { name: "http://www.ubuntu.com/usn/USN-3153-1", refsource: "MISC", url: "http://www.ubuntu.com/usn/USN-3153-1", }, { name: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZZECS3A7ULG4B4YXBKUZMA3NTQBE5HGU/", refsource: "MISC", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZZECS3A7ULG4B4YXBKUZMA3NTQBE5HGU/", }, { name: "https://bugs.chromium.org/p/chromium/issues/detail?id=669928", refsource: "CONFIRM", url: "https://bugs.chromium.org/p/chromium/issues/detail?id=669928", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", assignerShortName: "Chrome", cveId: "CVE-2016-9652", datePublished: "2019-11-20T14:56:30", dateReserved: "2016-11-29T00:00:00", dateUpdated: "2024-08-06T02:59:03.328Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", "vulnerability-lookup:meta": { nvd: "{\"cve\":{\"id\":\"CVE-2016-9652\",\"sourceIdentifier\":\"chrome-cve-admin@google.com\",\"published\":\"2019-11-20T15:15:11.523\",\"lastModified\":\"2024-11-21T03:01:34.633\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.\"},{\"lang\":\"es\",\"value\":\"múltiples vulnerabilidades no especificadas en Google Chrome anterior a la versión 55,0,2883,75\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:C/I:C/A:C\",\"baseScore\":10.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"55.0.2883.75\",\"matchCriteriaId\":\"76DFFA6C-0AB2-4975-99BB-D8B0CAE4B9DE\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-2919.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://www.debian.org/security/2016/dsa-3731\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://www.securityfocus.com/bid/94633\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://www.ubuntu.com/usn/USN-3153-1\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://bugs.chromium.org/p/chromium/issues/detail?id=669928\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7LGZO2VOGJOZUUXNQITD6YMIUQ2L5GTU/\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LV2U7SINGF3SBK7HVKSWFOYLQBUH6PUE/\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZECS3A7ULG4B4YXBKUZMA3NTQBE5HGU/\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://security.gentoo.org/glsa/201612-11\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-2919.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2016/dsa-3731\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/94633\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/USN-3153-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bugs.chromium.org/p/chromium/issues/detail?id=669928\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7LGZO2VOGJOZUUXNQITD6YMIUQ2L5GTU/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LV2U7SINGF3SBK7HVKSWFOYLQBUH6PUE/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZECS3A7ULG4B4YXBKUZMA3NTQBE5HGU/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.gentoo.org/glsa/201612-11\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}", }, }
ghsa-ch5q-r8mv-4p34
Vulnerability from github
Published
2022-05-24 17:01
Modified
2022-05-24 17:01
Details
Unspecified vulnerabilities in Google Chrome before 55.0.2883.75.
{ affected: [], aliases: [ "CVE-2016-9652", ], database_specific: { cwe_ids: [], github_reviewed: false, github_reviewed_at: null, nvd_published_at: "2019-11-20T15:15:00Z", severity: "HIGH", }, details: "Unspecified vulnerabilities in Google Chrome before 55.0.2883.75.", id: "GHSA-ch5q-r8mv-4p34", modified: "2022-05-24T17:01:36Z", published: "2022-05-24T17:01:36Z", references: [ { type: "ADVISORY", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-9652", }, { type: "WEB", url: "https://bugs.chromium.org/p/chromium/issues/detail?id=669928", }, { type: "WEB", url: "https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html", }, { type: "WEB", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7LGZO2VOGJOZUUXNQITD6YMIUQ2L5GTU", }, { type: "WEB", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LV2U7SINGF3SBK7HVKSWFOYLQBUH6PUE", }, { type: "WEB", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZZECS3A7ULG4B4YXBKUZMA3NTQBE5HGU", }, { type: "WEB", url: "https://security.gentoo.org/glsa/201612-11", }, { type: "WEB", url: "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html", }, { type: "WEB", url: "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html", }, { type: "WEB", url: "http://rhn.redhat.com/errata/RHSA-2016-2919.html", }, { type: "WEB", url: "http://www.debian.org/security/2016/dsa-3731", }, { type: "WEB", url: "http://www.securityfocus.com/bid/94633", }, { type: "WEB", url: "http://www.ubuntu.com/usn/USN-3153-1", }, ], schema_version: "1.4.0", severity: [], }
rhsa-2016:2919
Vulnerability from csaf_redhat
Published
2016-12-07 19:08
Modified
2024-11-14 21:41
Summary
Red Hat Security Advisory: chromium-browser security update
Notes
Topic
An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Chromium is an open-source web browser, powered by WebKit (Blink).
This update upgrades Chromium to version 55.0.2883.75.
Security Fix(es):
* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information when visited by the victim. (CVE-2016-5203, CVE-2016-5204, CVE-2016-5205, CVE-2016-5206, CVE-2016-5207, CVE-2016-5208, CVE-2016-5209, CVE-2016-5210, CVE-2016-5211, CVE-2016-5212, CVE-2016-5213, CVE-2016-9651, CVE-2016-9652, CVE-2016-5214, CVE-2016-5215, CVE-2016-5216, CVE-2016-5217, CVE-2016-5218, CVE-2016-5219, CVE-2016-5220, CVE-2016-5221, CVE-2016-5222, CVE-2016-5223, CVE-2016-5224, CVE-2016-5225, CVE-2016-5226, CVE-2016-9650)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "Chromium is an open-source web browser, powered by WebKit (Blink).\n\nThis update upgrades Chromium to version 55.0.2883.75.\n\nSecurity Fix(es):\n\n* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information when visited by the victim. (CVE-2016-5203, CVE-2016-5204, CVE-2016-5205, CVE-2016-5206, CVE-2016-5207, CVE-2016-5208, CVE-2016-5209, CVE-2016-5210, CVE-2016-5211, CVE-2016-5212, CVE-2016-5213, CVE-2016-9651, CVE-2016-9652, CVE-2016-5214, CVE-2016-5215, CVE-2016-5216, CVE-2016-5217, CVE-2016-5218, CVE-2016-5219, CVE-2016-5220, CVE-2016-5221, CVE-2016-5222, CVE-2016-5223, CVE-2016-5224, CVE-2016-5225, CVE-2016-5226, CVE-2016-9650)", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2016:2919", url: "https://access.redhat.com/errata/RHSA-2016:2919", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, { category: "external", summary: "1400850", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400850", }, { category: "external", summary: "1400851", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400851", }, { category: "external", summary: "1400852", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400852", }, { category: "external", summary: "1400853", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400853", }, { category: "external", summary: "1400854", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400854", }, { category: "external", summary: "1400855", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400855", }, { category: "external", summary: "1400856", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400856", }, { category: "external", summary: "1400857", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400857", }, { category: "external", summary: "1400859", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400859", }, { category: "external", summary: "1400861", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400861", }, { category: "external", summary: "1400862", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400862", }, { category: "external", summary: "1400863", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400863", }, { category: "external", summary: "1400864", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400864", }, { category: "external", summary: "1400865", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400865", }, { category: "external", summary: "1400866", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400866", }, { category: "external", summary: "1400867", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400867", }, { category: "external", summary: "1400868", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400868", }, { category: "external", summary: "1400869", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400869", }, { category: "external", summary: "1400870", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400870", }, { category: "external", summary: "1400871", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400871", }, { category: "external", summary: "1400872", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400872", }, { category: "external", summary: "1400873", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400873", }, { category: "external", summary: "1400875", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400875", }, { category: "external", summary: "1400876", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400876", }, { category: "external", summary: "1400877", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400877", }, { category: "external", summary: "1400878", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400878", }, { category: "external", summary: "1400879", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400879", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2919.json", }, ], title: "Red Hat Security Advisory: chromium-browser security update", tracking: { current_release_date: "2024-11-14T21:41:12+00:00", generator: { date: "2024-11-14T21:41:12+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2016:2919", initial_release_date: "2016-12-07T19:08:13+00:00", revision_history: [ { date: "2016-12-07T19:08:13+00:00", number: "1", summary: "Initial version", }, { date: "2016-12-07T19:08:13+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-14T21:41:12+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product: { name: "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.8.z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:6", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Supplementary (v. 6)", product: { name: "Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.8.z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:6", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.8.z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:6", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux Supplementary", }, { branches: [ { category: "product_version", name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", product: { name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", product_id: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/chromium-browser-debuginfo@55.0.2883.75-1.el6?arch=x86_64", }, }, }, { category: "product_version", name: "chromium-browser-0:55.0.2883.75-1.el6.x86_64", product: { name: "chromium-browser-0:55.0.2883.75-1.el6.x86_64", product_id: "chromium-browser-0:55.0.2883.75-1.el6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/chromium-browser@55.0.2883.75-1.el6?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", product: { name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", product_id: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", product_identification_helper: { purl: "pkg:rpm/redhat/chromium-browser-debuginfo@55.0.2883.75-1.el6?arch=i686", }, }, }, { category: "product_version", name: "chromium-browser-0:55.0.2883.75-1.el6.i686", product: { name: "chromium-browser-0:55.0.2883.75-1.el6.i686", product_id: "chromium-browser-0:55.0.2883.75-1.el6.i686", product_identification_helper: { purl: "pkg:rpm/redhat/chromium-browser@55.0.2883.75-1.el6?arch=i686", }, }, }, ], category: "architecture", name: "i686", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "chromium-browser-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", }, product_reference: "chromium-browser-0:55.0.2883.75-1.el6.i686", relates_to_product_reference: "6Client-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", }, product_reference: "chromium-browser-0:55.0.2883.75-1.el6.x86_64", relates_to_product_reference: "6Client-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", }, product_reference: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", relates_to_product_reference: "6Client-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", }, product_reference: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", relates_to_product_reference: "6Client-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", }, product_reference: "chromium-browser-0:55.0.2883.75-1.el6.i686", relates_to_product_reference: "6Server-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", }, product_reference: "chromium-browser-0:55.0.2883.75-1.el6.x86_64", relates_to_product_reference: "6Server-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", }, product_reference: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", relates_to_product_reference: "6Server-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", }, product_reference: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", relates_to_product_reference: "6Server-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", }, product_reference: "chromium-browser-0:55.0.2883.75-1.el6.i686", relates_to_product_reference: "6Workstation-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", }, product_reference: "chromium-browser-0:55.0.2883.75-1.el6.x86_64", relates_to_product_reference: "6Workstation-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", }, product_reference: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", relates_to_product_reference: "6Workstation-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", }, product_reference: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", relates_to_product_reference: "6Workstation-Supplementary-6.8.z", }, ], }, vulnerabilities: [ { cve: "CVE-2016-5203", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400857", }, ], notes: [ { category: "description", text: "A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: use after free in pdfium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5203", }, { category: "external", summary: "RHBZ#1400857", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400857", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5203", url: "https://www.cve.org/CVERecord?id=CVE-2016-5203", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5203", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5203", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: use after free in pdfium", }, { cve: "CVE-2016-5204", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400855", }, ], notes: [ { category: "description", text: "Leaking of an SVG shadow tree leading to corruption of the DOM tree in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: universal xss in blink", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5204", }, { category: "external", summary: "RHBZ#1400855", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400855", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5204", url: "https://www.cve.org/CVERecord?id=CVE-2016-5204", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5204", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5204", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: universal xss in blink", }, { cve: "CVE-2016-5205", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400854", }, ], notes: [ { category: "description", text: "Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac, incorrectly handles deferred page loads, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: universal xss in blink", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5205", }, { category: "external", summary: "RHBZ#1400854", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400854", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5205", url: "https://www.cve.org/CVERecord?id=CVE-2016-5205", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5205", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5205", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: universal xss in blink", }, { cve: "CVE-2016-5206", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400853", }, ], notes: [ { category: "description", text: "The PDF plugin in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly followed redirects, which allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: same-origin bypass in pdfium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5206", }, { category: "external", summary: "RHBZ#1400853", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400853", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5206", url: "https://www.cve.org/CVERecord?id=CVE-2016-5206", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5206", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5206", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: same-origin bypass in pdfium", }, { cve: "CVE-2016-5207", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400852", }, ], notes: [ { category: "description", text: "In Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android, corruption of the DOM tree could occur during the removal of a full screen element, which allowed a remote attacker to achieve arbitrary code execution via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: universal xss in blink", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5207", }, { category: "external", summary: "RHBZ#1400852", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400852", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5207", url: "https://www.cve.org/CVERecord?id=CVE-2016-5207", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5207", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5207", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: universal xss in blink", }, { cve: "CVE-2016-5208", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400851", }, ], notes: [ { category: "description", text: "Blink in Google Chrome prior to 55.0.2883.75 for Linux and Windows, and 55.0.2883.84 for Android allowed possible corruption of the DOM tree during synchronous event handling, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: universal xss in blink", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5208", }, { category: "external", summary: "RHBZ#1400851", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400851", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5208", url: "https://www.cve.org/CVERecord?id=CVE-2016-5208", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5208", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5208", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: universal xss in blink", }, { cve: "CVE-2016-5209", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400856", }, ], notes: [ { category: "description", text: "Bad casting in bitmap manipulation in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: out of bounds write in blink", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5209", }, { category: "external", summary: "RHBZ#1400856", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400856", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5209", url: "https://www.cve.org/CVERecord?id=CVE-2016-5209", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5209", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5209", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: out of bounds write in blink", }, { cve: "CVE-2016-5210", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400859", }, ], notes: [ { category: "description", text: "Heap buffer overflow during TIFF image parsing in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: out of bounds write in pdfium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5210", }, { category: "external", summary: "RHBZ#1400859", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400859", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5210", url: "https://www.cve.org/CVERecord?id=CVE-2016-5210", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5210", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5210", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: out of bounds write in pdfium", }, { cve: "CVE-2016-5211", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400862", }, ], notes: [ { category: "description", text: "A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: use after free in pdfium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5211", }, { category: "external", summary: "RHBZ#1400862", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400862", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5211", url: "https://www.cve.org/CVERecord?id=CVE-2016-5211", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5211", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5211", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: use after free in pdfium", }, { cve: "CVE-2016-5212", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400861", }, ], notes: [ { category: "description", text: "Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android insufficiently sanitized DevTools URLs, which allowed a remote attacker to read local files via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: local file disclosure in devtools", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5212", }, { category: "external", summary: "RHBZ#1400861", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400861", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5212", url: "https://www.cve.org/CVERecord?id=CVE-2016-5212", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5212", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5212", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: local file disclosure in devtools", }, { cve: "CVE-2016-5213", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400863", }, ], notes: [ { category: "description", text: "A use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: use after free in v8", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5213", }, { category: "external", summary: "RHBZ#1400863", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400863", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5213", url: "https://www.cve.org/CVERecord?id=CVE-2016-5213", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5213", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5213", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: use after free in v8", }, { cve: "CVE-2016-5214", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400864", }, ], notes: [ { category: "description", text: "Google Chrome prior to 55.0.2883.75 for Windows mishandled downloaded files, which allowed a remote attacker to prevent the downloaded file from receiving the Mark of the Web via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: file download protection bypass", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5214", }, { category: "external", summary: "RHBZ#1400864", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400864", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5214", url: "https://www.cve.org/CVERecord?id=CVE-2016-5214", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5214", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5214", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: file download protection bypass", }, { cve: "CVE-2016-5215", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400866", }, ], notes: [ { category: "description", text: "A use after free in webaudio in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: use after free in webaudio", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5215", }, { category: "external", summary: "RHBZ#1400866", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400866", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5215", url: "https://www.cve.org/CVERecord?id=CVE-2016-5215", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5215", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5215", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: use after free in webaudio", }, { cve: "CVE-2016-5216", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400865", }, ], notes: [ { category: "description", text: "A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: use after free in pdfium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5216", }, { category: "external", summary: "RHBZ#1400865", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400865", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5216", url: "https://www.cve.org/CVERecord?id=CVE-2016-5216", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5216", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5216", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: use after free in pdfium", }, { cve: "CVE-2016-5217", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400867", }, ], notes: [ { category: "description", text: "The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly permitted access to privileged plugins, which allowed a remote attacker to bypass site isolation via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: use of unvalidated data in pdfium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5217", }, { category: "external", summary: "RHBZ#1400867", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400867", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5217", url: "https://www.cve.org/CVERecord?id=CVE-2016-5217", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5217", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5217", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: use of unvalidated data in pdfium", }, { cve: "CVE-2016-5218", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400868", }, ], notes: [ { category: "description", text: "The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation within PDFs, which allowed a remote attacker to temporarily spoof the contents of the Omnibox (URL bar) via a crafted HTML page containing PDF data.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: address spoofing in omnibox", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5218", }, { category: "external", summary: "RHBZ#1400868", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400868", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5218", url: "https://www.cve.org/CVERecord?id=CVE-2016-5218", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5218", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5218", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: address spoofing in omnibox", }, { cve: "CVE-2016-5219", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400869", }, ], notes: [ { category: "description", text: "A heap use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: use after free in v8", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5219", }, { category: "external", summary: "RHBZ#1400869", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400869", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5219", url: "https://www.cve.org/CVERecord?id=CVE-2016-5219", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5219", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5219", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: use after free in v8", }, { cve: "CVE-2016-5220", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400871", }, ], notes: [ { category: "description", text: "PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation within PDFs, which allowed a remote attacker to read local files via a crafted PDF file.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: local file access in pdfium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5220", }, { category: "external", summary: "RHBZ#1400871", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400871", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5220", url: "https://www.cve.org/CVERecord?id=CVE-2016-5220", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5220", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5220", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: local file access in pdfium", }, { cve: "CVE-2016-5221", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400870", }, ], notes: [ { category: "description", text: "Type confusion in libGLESv2 in ANGLE in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android possibly allowed a remote attacker to bypass buffer validation via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: integer overflow in angle", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5221", }, { category: "external", summary: "RHBZ#1400870", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400870", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5221", url: "https://www.cve.org/CVERecord?id=CVE-2016-5221", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5221", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5221", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: integer overflow in angle", }, { cve: "CVE-2016-5222", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400872", }, ], notes: [ { category: "description", text: "Incorrect handling of invalid URLs in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: address spoofing in omnibox", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5222", }, { category: "external", summary: "RHBZ#1400872", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400872", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5222", url: "https://www.cve.org/CVERecord?id=CVE-2016-5222", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5222", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5222", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: address spoofing in omnibox", }, { cve: "CVE-2016-5223", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400875", }, ], notes: [ { category: "description", text: "Integer overflow in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption or DoS via a crafted PDF file.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: integer overflow in pdfium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5223", }, { category: "external", summary: "RHBZ#1400875", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400875", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5223", url: "https://www.cve.org/CVERecord?id=CVE-2016-5223", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5223", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5223", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "chromium-browser: integer overflow in pdfium", }, { cve: "CVE-2016-5224", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400878", }, ], notes: [ { category: "description", text: "A timing attack on denormalized floating point arithmetic in SVG filters in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: same-origin bypass in svg", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5224", }, { category: "external", summary: "RHBZ#1400878", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400878", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5224", url: "https://www.cve.org/CVERecord?id=CVE-2016-5224", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5224", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5224", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "chromium-browser: same-origin bypass in svg", }, { cve: "CVE-2016-5225", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400877", }, ], notes: [ { category: "description", text: "Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled form actions, which allowed a remote attacker to bypass Content Security Policy via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: csp bypass in blink", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5225", }, { category: "external", summary: "RHBZ#1400877", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400877", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5225", url: "https://www.cve.org/CVERecord?id=CVE-2016-5225", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5225", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5225", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "chromium-browser: csp bypass in blink", }, { cve: "CVE-2016-5226", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400876", }, ], notes: [ { category: "description", text: "Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac executed javascript: URLs entered in the URL bar in the context of the current tab, which allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: limited xss in blink", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5226", }, { category: "external", summary: "RHBZ#1400876", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400876", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5226", url: "https://www.cve.org/CVERecord?id=CVE-2016-5226", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5226", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5226", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "chromium-browser: limited xss in blink", }, { cve: "CVE-2016-9650", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400873", }, ], notes: [ { category: "description", text: "Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled iframes, which allowed a remote attacker to bypass a no-referrer policy via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: csp referrer disclosure", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-9650", }, { category: "external", summary: "RHBZ#1400873", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400873", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-9650", url: "https://www.cve.org/CVERecord?id=CVE-2016-9650", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-9650", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-9650", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "chromium-browser: csp referrer disclosure", }, { cve: "CVE-2016-9651", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400850", }, ], notes: [ { category: "description", text: "A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: private property access in v8", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-9651", }, { category: "external", summary: "RHBZ#1400850", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400850", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-9651", url: "https://www.cve.org/CVERecord?id=CVE-2016-9651", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-9651", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-9651", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: private property access in v8", }, { cve: "CVE-2016-9652", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400879", }, ], notes: [ { category: "description", text: "Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: various fixes from internal audits", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-9652", }, { category: "external", summary: "RHBZ#1400879", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400879", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-9652", url: "https://www.cve.org/CVERecord?id=CVE-2016-9652", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-9652", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-9652", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: various fixes from internal audits", }, ], }
rhsa-2016_2919
Vulnerability from csaf_redhat
Published
2016-12-07 19:08
Modified
2024-11-14 21:41
Summary
Red Hat Security Advisory: chromium-browser security update
Notes
Topic
An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Chromium is an open-source web browser, powered by WebKit (Blink).
This update upgrades Chromium to version 55.0.2883.75.
Security Fix(es):
* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information when visited by the victim. (CVE-2016-5203, CVE-2016-5204, CVE-2016-5205, CVE-2016-5206, CVE-2016-5207, CVE-2016-5208, CVE-2016-5209, CVE-2016-5210, CVE-2016-5211, CVE-2016-5212, CVE-2016-5213, CVE-2016-9651, CVE-2016-9652, CVE-2016-5214, CVE-2016-5215, CVE-2016-5216, CVE-2016-5217, CVE-2016-5218, CVE-2016-5219, CVE-2016-5220, CVE-2016-5221, CVE-2016-5222, CVE-2016-5223, CVE-2016-5224, CVE-2016-5225, CVE-2016-5226, CVE-2016-9650)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "Chromium is an open-source web browser, powered by WebKit (Blink).\n\nThis update upgrades Chromium to version 55.0.2883.75.\n\nSecurity Fix(es):\n\n* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information when visited by the victim. (CVE-2016-5203, CVE-2016-5204, CVE-2016-5205, CVE-2016-5206, CVE-2016-5207, CVE-2016-5208, CVE-2016-5209, CVE-2016-5210, CVE-2016-5211, CVE-2016-5212, CVE-2016-5213, CVE-2016-9651, CVE-2016-9652, CVE-2016-5214, CVE-2016-5215, CVE-2016-5216, CVE-2016-5217, CVE-2016-5218, CVE-2016-5219, CVE-2016-5220, CVE-2016-5221, CVE-2016-5222, CVE-2016-5223, CVE-2016-5224, CVE-2016-5225, CVE-2016-5226, CVE-2016-9650)", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2016:2919", url: "https://access.redhat.com/errata/RHSA-2016:2919", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, { category: "external", summary: "1400850", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400850", }, { category: "external", summary: "1400851", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400851", }, { category: "external", summary: "1400852", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400852", }, { category: "external", summary: "1400853", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400853", }, { category: "external", summary: "1400854", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400854", }, { category: "external", summary: "1400855", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400855", }, { category: "external", summary: "1400856", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400856", }, { category: "external", summary: "1400857", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400857", }, { category: "external", summary: "1400859", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400859", }, { category: "external", summary: "1400861", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400861", }, { category: "external", summary: "1400862", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400862", }, { category: "external", summary: "1400863", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400863", }, { category: "external", summary: "1400864", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400864", }, { category: "external", summary: "1400865", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400865", }, { category: "external", summary: "1400866", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400866", }, { category: "external", summary: "1400867", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400867", }, { category: "external", summary: "1400868", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400868", }, { category: "external", summary: "1400869", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400869", }, { category: "external", summary: "1400870", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400870", }, { category: "external", summary: "1400871", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400871", }, { category: "external", summary: "1400872", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400872", }, { category: "external", summary: "1400873", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400873", }, { category: "external", summary: "1400875", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400875", }, { category: "external", summary: "1400876", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400876", }, { category: "external", summary: "1400877", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400877", }, { category: "external", summary: "1400878", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400878", }, { category: "external", summary: "1400879", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400879", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2919.json", }, ], title: "Red Hat Security Advisory: chromium-browser security update", tracking: { current_release_date: "2024-11-14T21:41:12+00:00", generator: { date: "2024-11-14T21:41:12+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2016:2919", initial_release_date: "2016-12-07T19:08:13+00:00", revision_history: [ { date: "2016-12-07T19:08:13+00:00", number: "1", summary: "Initial version", }, { date: "2016-12-07T19:08:13+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-14T21:41:12+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product: { name: "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.8.z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:6", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Supplementary (v. 6)", product: { name: "Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.8.z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:6", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.8.z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:6", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux Supplementary", }, { branches: [ { category: "product_version", name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", product: { name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", product_id: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/chromium-browser-debuginfo@55.0.2883.75-1.el6?arch=x86_64", }, }, }, { category: "product_version", name: "chromium-browser-0:55.0.2883.75-1.el6.x86_64", product: { name: "chromium-browser-0:55.0.2883.75-1.el6.x86_64", product_id: "chromium-browser-0:55.0.2883.75-1.el6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/chromium-browser@55.0.2883.75-1.el6?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", product: { name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", product_id: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", product_identification_helper: { purl: "pkg:rpm/redhat/chromium-browser-debuginfo@55.0.2883.75-1.el6?arch=i686", }, }, }, { category: "product_version", name: "chromium-browser-0:55.0.2883.75-1.el6.i686", product: { name: "chromium-browser-0:55.0.2883.75-1.el6.i686", product_id: "chromium-browser-0:55.0.2883.75-1.el6.i686", product_identification_helper: { purl: "pkg:rpm/redhat/chromium-browser@55.0.2883.75-1.el6?arch=i686", }, }, }, ], category: "architecture", name: "i686", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "chromium-browser-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", }, product_reference: "chromium-browser-0:55.0.2883.75-1.el6.i686", relates_to_product_reference: "6Client-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", }, product_reference: "chromium-browser-0:55.0.2883.75-1.el6.x86_64", relates_to_product_reference: "6Client-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", }, product_reference: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", relates_to_product_reference: "6Client-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", }, product_reference: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", relates_to_product_reference: "6Client-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", }, product_reference: "chromium-browser-0:55.0.2883.75-1.el6.i686", relates_to_product_reference: "6Server-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", }, product_reference: "chromium-browser-0:55.0.2883.75-1.el6.x86_64", relates_to_product_reference: "6Server-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", }, product_reference: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", relates_to_product_reference: "6Server-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", }, product_reference: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", relates_to_product_reference: "6Server-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", }, product_reference: "chromium-browser-0:55.0.2883.75-1.el6.i686", relates_to_product_reference: "6Workstation-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", }, product_reference: "chromium-browser-0:55.0.2883.75-1.el6.x86_64", relates_to_product_reference: "6Workstation-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", }, product_reference: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", relates_to_product_reference: "6Workstation-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", }, product_reference: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", relates_to_product_reference: "6Workstation-Supplementary-6.8.z", }, ], }, vulnerabilities: [ { cve: "CVE-2016-5203", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400857", }, ], notes: [ { category: "description", text: "A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: use after free in pdfium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5203", }, { category: "external", summary: "RHBZ#1400857", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400857", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5203", url: "https://www.cve.org/CVERecord?id=CVE-2016-5203", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5203", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5203", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: use after free in pdfium", }, { cve: "CVE-2016-5204", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400855", }, ], notes: [ { category: "description", text: "Leaking of an SVG shadow tree leading to corruption of the DOM tree in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: universal xss in blink", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5204", }, { category: "external", summary: "RHBZ#1400855", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400855", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5204", url: "https://www.cve.org/CVERecord?id=CVE-2016-5204", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5204", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5204", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: universal xss in blink", }, { cve: "CVE-2016-5205", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400854", }, ], notes: [ { category: "description", text: "Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac, incorrectly handles deferred page loads, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: universal xss in blink", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5205", }, { category: "external", summary: "RHBZ#1400854", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400854", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5205", url: "https://www.cve.org/CVERecord?id=CVE-2016-5205", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5205", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5205", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: universal xss in blink", }, { cve: "CVE-2016-5206", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400853", }, ], notes: [ { category: "description", text: "The PDF plugin in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly followed redirects, which allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: same-origin bypass in pdfium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5206", }, { category: "external", summary: "RHBZ#1400853", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400853", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5206", url: "https://www.cve.org/CVERecord?id=CVE-2016-5206", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5206", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5206", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: same-origin bypass in pdfium", }, { cve: "CVE-2016-5207", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400852", }, ], notes: [ { category: "description", text: "In Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android, corruption of the DOM tree could occur during the removal of a full screen element, which allowed a remote attacker to achieve arbitrary code execution via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: universal xss in blink", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5207", }, { category: "external", summary: "RHBZ#1400852", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400852", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5207", url: "https://www.cve.org/CVERecord?id=CVE-2016-5207", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5207", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5207", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: universal xss in blink", }, { cve: "CVE-2016-5208", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400851", }, ], notes: [ { category: "description", text: "Blink in Google Chrome prior to 55.0.2883.75 for Linux and Windows, and 55.0.2883.84 for Android allowed possible corruption of the DOM tree during synchronous event handling, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: universal xss in blink", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5208", }, { category: "external", summary: "RHBZ#1400851", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400851", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5208", url: "https://www.cve.org/CVERecord?id=CVE-2016-5208", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5208", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5208", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: universal xss in blink", }, { cve: "CVE-2016-5209", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400856", }, ], notes: [ { category: "description", text: "Bad casting in bitmap manipulation in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: out of bounds write in blink", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5209", }, { category: "external", summary: "RHBZ#1400856", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400856", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5209", url: "https://www.cve.org/CVERecord?id=CVE-2016-5209", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5209", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5209", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: out of bounds write in blink", }, { cve: "CVE-2016-5210", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400859", }, ], notes: [ { category: "description", text: "Heap buffer overflow during TIFF image parsing in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: out of bounds write in pdfium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5210", }, { category: "external", summary: "RHBZ#1400859", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400859", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5210", url: "https://www.cve.org/CVERecord?id=CVE-2016-5210", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5210", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5210", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: out of bounds write in pdfium", }, { cve: "CVE-2016-5211", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400862", }, ], notes: [ { category: "description", text: "A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: use after free in pdfium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5211", }, { category: "external", summary: "RHBZ#1400862", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400862", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5211", url: "https://www.cve.org/CVERecord?id=CVE-2016-5211", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5211", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5211", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: use after free in pdfium", }, { cve: "CVE-2016-5212", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400861", }, ], notes: [ { category: "description", text: "Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android insufficiently sanitized DevTools URLs, which allowed a remote attacker to read local files via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: local file disclosure in devtools", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5212", }, { category: "external", summary: "RHBZ#1400861", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400861", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5212", url: "https://www.cve.org/CVERecord?id=CVE-2016-5212", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5212", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5212", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: local file disclosure in devtools", }, { cve: "CVE-2016-5213", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400863", }, ], notes: [ { category: "description", text: "A use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: use after free in v8", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5213", }, { category: "external", summary: "RHBZ#1400863", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400863", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5213", url: "https://www.cve.org/CVERecord?id=CVE-2016-5213", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5213", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5213", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: use after free in v8", }, { cve: "CVE-2016-5214", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400864", }, ], notes: [ { category: "description", text: "Google Chrome prior to 55.0.2883.75 for Windows mishandled downloaded files, which allowed a remote attacker to prevent the downloaded file from receiving the Mark of the Web via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: file download protection bypass", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5214", }, { category: "external", summary: "RHBZ#1400864", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400864", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5214", url: "https://www.cve.org/CVERecord?id=CVE-2016-5214", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5214", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5214", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: file download protection bypass", }, { cve: "CVE-2016-5215", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400866", }, ], notes: [ { category: "description", text: "A use after free in webaudio in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: use after free in webaudio", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5215", }, { category: "external", summary: "RHBZ#1400866", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400866", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5215", url: "https://www.cve.org/CVERecord?id=CVE-2016-5215", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5215", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5215", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: use after free in webaudio", }, { cve: "CVE-2016-5216", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400865", }, ], notes: [ { category: "description", text: "A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: use after free in pdfium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5216", }, { category: "external", summary: "RHBZ#1400865", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400865", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5216", url: "https://www.cve.org/CVERecord?id=CVE-2016-5216", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5216", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5216", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: use after free in pdfium", }, { cve: "CVE-2016-5217", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400867", }, ], notes: [ { category: "description", text: "The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly permitted access to privileged plugins, which allowed a remote attacker to bypass site isolation via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: use of unvalidated data in pdfium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5217", }, { category: "external", summary: "RHBZ#1400867", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400867", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5217", url: "https://www.cve.org/CVERecord?id=CVE-2016-5217", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5217", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5217", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: use of unvalidated data in pdfium", }, { cve: "CVE-2016-5218", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400868", }, ], notes: [ { category: "description", text: "The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation within PDFs, which allowed a remote attacker to temporarily spoof the contents of the Omnibox (URL bar) via a crafted HTML page containing PDF data.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: address spoofing in omnibox", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5218", }, { category: "external", summary: "RHBZ#1400868", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400868", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5218", url: "https://www.cve.org/CVERecord?id=CVE-2016-5218", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5218", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5218", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: address spoofing in omnibox", }, { cve: "CVE-2016-5219", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400869", }, ], notes: [ { category: "description", text: "A heap use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: use after free in v8", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5219", }, { category: "external", summary: "RHBZ#1400869", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400869", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5219", url: "https://www.cve.org/CVERecord?id=CVE-2016-5219", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5219", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5219", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: use after free in v8", }, { cve: "CVE-2016-5220", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400871", }, ], notes: [ { category: "description", text: "PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation within PDFs, which allowed a remote attacker to read local files via a crafted PDF file.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: local file access in pdfium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5220", }, { category: "external", summary: "RHBZ#1400871", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400871", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5220", url: "https://www.cve.org/CVERecord?id=CVE-2016-5220", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5220", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5220", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: local file access in pdfium", }, { cve: "CVE-2016-5221", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400870", }, ], notes: [ { category: "description", text: "Type confusion in libGLESv2 in ANGLE in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android possibly allowed a remote attacker to bypass buffer validation via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: integer overflow in angle", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5221", }, { category: "external", summary: "RHBZ#1400870", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400870", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5221", url: "https://www.cve.org/CVERecord?id=CVE-2016-5221", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5221", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5221", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: integer overflow in angle", }, { cve: "CVE-2016-5222", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400872", }, ], notes: [ { category: "description", text: "Incorrect handling of invalid URLs in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: address spoofing in omnibox", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5222", }, { category: "external", summary: "RHBZ#1400872", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400872", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5222", url: "https://www.cve.org/CVERecord?id=CVE-2016-5222", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5222", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5222", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: address spoofing in omnibox", }, { cve: "CVE-2016-5223", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400875", }, ], notes: [ { category: "description", text: "Integer overflow in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption or DoS via a crafted PDF file.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: integer overflow in pdfium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5223", }, { category: "external", summary: "RHBZ#1400875", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400875", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5223", url: "https://www.cve.org/CVERecord?id=CVE-2016-5223", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5223", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5223", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "chromium-browser: integer overflow in pdfium", }, { cve: "CVE-2016-5224", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400878", }, ], notes: [ { category: "description", text: "A timing attack on denormalized floating point arithmetic in SVG filters in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: same-origin bypass in svg", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5224", }, { category: "external", summary: "RHBZ#1400878", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400878", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5224", url: "https://www.cve.org/CVERecord?id=CVE-2016-5224", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5224", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5224", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "chromium-browser: same-origin bypass in svg", }, { cve: "CVE-2016-5225", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400877", }, ], notes: [ { category: "description", text: "Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled form actions, which allowed a remote attacker to bypass Content Security Policy via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: csp bypass in blink", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5225", }, { category: "external", summary: "RHBZ#1400877", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400877", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5225", url: "https://www.cve.org/CVERecord?id=CVE-2016-5225", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5225", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5225", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "chromium-browser: csp bypass in blink", }, { cve: "CVE-2016-5226", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400876", }, ], notes: [ { category: "description", text: "Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac executed javascript: URLs entered in the URL bar in the context of the current tab, which allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: limited xss in blink", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5226", }, { category: "external", summary: "RHBZ#1400876", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400876", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5226", url: "https://www.cve.org/CVERecord?id=CVE-2016-5226", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5226", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5226", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "chromium-browser: limited xss in blink", }, { cve: "CVE-2016-9650", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400873", }, ], notes: [ { category: "description", text: "Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled iframes, which allowed a remote attacker to bypass a no-referrer policy via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: csp referrer disclosure", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-9650", }, { category: "external", summary: "RHBZ#1400873", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400873", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-9650", url: "https://www.cve.org/CVERecord?id=CVE-2016-9650", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-9650", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-9650", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "chromium-browser: csp referrer disclosure", }, { cve: "CVE-2016-9651", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400850", }, ], notes: [ { category: "description", text: "A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: private property access in v8", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-9651", }, { category: "external", summary: "RHBZ#1400850", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400850", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-9651", url: "https://www.cve.org/CVERecord?id=CVE-2016-9651", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-9651", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-9651", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: private property access in v8", }, { cve: "CVE-2016-9652", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400879", }, ], notes: [ { category: "description", text: "Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: various fixes from internal audits", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-9652", }, { category: "external", summary: "RHBZ#1400879", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400879", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-9652", url: "https://www.cve.org/CVERecord?id=CVE-2016-9652", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-9652", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-9652", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: various fixes from internal audits", }, ], }
RHSA-2016:2919
Vulnerability from csaf_redhat
Published
2016-12-07 19:08
Modified
2024-11-14 21:41
Summary
Red Hat Security Advisory: chromium-browser security update
Notes
Topic
An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Chromium is an open-source web browser, powered by WebKit (Blink).
This update upgrades Chromium to version 55.0.2883.75.
Security Fix(es):
* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information when visited by the victim. (CVE-2016-5203, CVE-2016-5204, CVE-2016-5205, CVE-2016-5206, CVE-2016-5207, CVE-2016-5208, CVE-2016-5209, CVE-2016-5210, CVE-2016-5211, CVE-2016-5212, CVE-2016-5213, CVE-2016-9651, CVE-2016-9652, CVE-2016-5214, CVE-2016-5215, CVE-2016-5216, CVE-2016-5217, CVE-2016-5218, CVE-2016-5219, CVE-2016-5220, CVE-2016-5221, CVE-2016-5222, CVE-2016-5223, CVE-2016-5224, CVE-2016-5225, CVE-2016-5226, CVE-2016-9650)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "Chromium is an open-source web browser, powered by WebKit (Blink).\n\nThis update upgrades Chromium to version 55.0.2883.75.\n\nSecurity Fix(es):\n\n* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information when visited by the victim. (CVE-2016-5203, CVE-2016-5204, CVE-2016-5205, CVE-2016-5206, CVE-2016-5207, CVE-2016-5208, CVE-2016-5209, CVE-2016-5210, CVE-2016-5211, CVE-2016-5212, CVE-2016-5213, CVE-2016-9651, CVE-2016-9652, CVE-2016-5214, CVE-2016-5215, CVE-2016-5216, CVE-2016-5217, CVE-2016-5218, CVE-2016-5219, CVE-2016-5220, CVE-2016-5221, CVE-2016-5222, CVE-2016-5223, CVE-2016-5224, CVE-2016-5225, CVE-2016-5226, CVE-2016-9650)", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2016:2919", url: "https://access.redhat.com/errata/RHSA-2016:2919", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, { category: "external", summary: "1400850", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400850", }, { category: "external", summary: "1400851", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400851", }, { category: "external", summary: "1400852", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400852", }, { category: "external", summary: "1400853", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400853", }, { category: "external", summary: "1400854", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400854", }, { category: "external", summary: "1400855", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400855", }, { category: "external", summary: "1400856", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400856", }, { category: "external", summary: "1400857", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400857", }, { category: "external", summary: "1400859", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400859", }, { category: "external", summary: "1400861", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400861", }, { category: "external", summary: "1400862", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400862", }, { category: "external", summary: "1400863", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400863", }, { category: "external", summary: "1400864", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400864", }, { category: "external", summary: "1400865", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400865", }, { category: "external", summary: "1400866", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400866", }, { category: "external", summary: "1400867", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400867", }, { category: "external", summary: "1400868", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400868", }, { category: "external", summary: "1400869", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400869", }, { category: "external", summary: "1400870", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400870", }, { category: "external", summary: "1400871", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400871", }, { category: "external", summary: "1400872", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400872", }, { category: "external", summary: "1400873", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400873", }, { category: "external", summary: "1400875", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400875", }, { category: "external", summary: "1400876", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400876", }, { category: "external", summary: "1400877", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400877", }, { category: "external", summary: "1400878", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400878", }, { category: "external", summary: "1400879", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400879", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2919.json", }, ], title: "Red Hat Security Advisory: chromium-browser security update", tracking: { current_release_date: "2024-11-14T21:41:12+00:00", generator: { date: "2024-11-14T21:41:12+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2016:2919", initial_release_date: "2016-12-07T19:08:13+00:00", revision_history: [ { date: "2016-12-07T19:08:13+00:00", number: "1", summary: "Initial version", }, { date: "2016-12-07T19:08:13+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-14T21:41:12+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product: { name: "Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.8.z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:6", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Supplementary (v. 6)", product: { name: "Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.8.z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:6", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.8.z", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_extras:6", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux Supplementary", }, { branches: [ { category: "product_version", name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", product: { name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", product_id: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/chromium-browser-debuginfo@55.0.2883.75-1.el6?arch=x86_64", }, }, }, { category: "product_version", name: "chromium-browser-0:55.0.2883.75-1.el6.x86_64", product: { name: "chromium-browser-0:55.0.2883.75-1.el6.x86_64", product_id: "chromium-browser-0:55.0.2883.75-1.el6.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/chromium-browser@55.0.2883.75-1.el6?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", product: { name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", product_id: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", product_identification_helper: { purl: "pkg:rpm/redhat/chromium-browser-debuginfo@55.0.2883.75-1.el6?arch=i686", }, }, }, { category: "product_version", name: "chromium-browser-0:55.0.2883.75-1.el6.i686", product: { name: "chromium-browser-0:55.0.2883.75-1.el6.i686", product_id: "chromium-browser-0:55.0.2883.75-1.el6.i686", product_identification_helper: { purl: "pkg:rpm/redhat/chromium-browser@55.0.2883.75-1.el6?arch=i686", }, }, }, ], category: "architecture", name: "i686", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "chromium-browser-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", }, product_reference: "chromium-browser-0:55.0.2883.75-1.el6.i686", relates_to_product_reference: "6Client-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", }, product_reference: "chromium-browser-0:55.0.2883.75-1.el6.x86_64", relates_to_product_reference: "6Client-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", }, product_reference: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", relates_to_product_reference: "6Client-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)", product_id: "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", }, product_reference: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", relates_to_product_reference: "6Client-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", }, product_reference: "chromium-browser-0:55.0.2883.75-1.el6.i686", relates_to_product_reference: "6Server-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", }, product_reference: "chromium-browser-0:55.0.2883.75-1.el6.x86_64", relates_to_product_reference: "6Server-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", }, product_reference: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", relates_to_product_reference: "6Server-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)", product_id: "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", }, product_reference: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", relates_to_product_reference: "6Server-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", }, product_reference: "chromium-browser-0:55.0.2883.75-1.el6.i686", relates_to_product_reference: "6Workstation-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", }, product_reference: "chromium-browser-0:55.0.2883.75-1.el6.x86_64", relates_to_product_reference: "6Workstation-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", }, product_reference: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", relates_to_product_reference: "6Workstation-Supplementary-6.8.z", }, { category: "default_component_of", full_product_name: { name: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)", product_id: "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", }, product_reference: "chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", relates_to_product_reference: "6Workstation-Supplementary-6.8.z", }, ], }, vulnerabilities: [ { cve: "CVE-2016-5203", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400857", }, ], notes: [ { category: "description", text: "A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: use after free in pdfium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5203", }, { category: "external", summary: "RHBZ#1400857", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400857", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5203", url: "https://www.cve.org/CVERecord?id=CVE-2016-5203", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5203", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5203", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: use after free in pdfium", }, { cve: "CVE-2016-5204", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400855", }, ], notes: [ { category: "description", text: "Leaking of an SVG shadow tree leading to corruption of the DOM tree in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: universal xss in blink", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5204", }, { category: "external", summary: "RHBZ#1400855", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400855", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5204", url: "https://www.cve.org/CVERecord?id=CVE-2016-5204", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5204", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5204", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: universal xss in blink", }, { cve: "CVE-2016-5205", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400854", }, ], notes: [ { category: "description", text: "Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac, incorrectly handles deferred page loads, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: universal xss in blink", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5205", }, { category: "external", summary: "RHBZ#1400854", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400854", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5205", url: "https://www.cve.org/CVERecord?id=CVE-2016-5205", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5205", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5205", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: universal xss in blink", }, { cve: "CVE-2016-5206", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400853", }, ], notes: [ { category: "description", text: "The PDF plugin in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly followed redirects, which allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: same-origin bypass in pdfium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5206", }, { category: "external", summary: "RHBZ#1400853", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400853", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5206", url: "https://www.cve.org/CVERecord?id=CVE-2016-5206", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5206", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5206", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: same-origin bypass in pdfium", }, { cve: "CVE-2016-5207", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400852", }, ], notes: [ { category: "description", text: "In Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android, corruption of the DOM tree could occur during the removal of a full screen element, which allowed a remote attacker to achieve arbitrary code execution via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: universal xss in blink", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5207", }, { category: "external", summary: "RHBZ#1400852", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400852", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5207", url: "https://www.cve.org/CVERecord?id=CVE-2016-5207", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5207", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5207", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: universal xss in blink", }, { cve: "CVE-2016-5208", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400851", }, ], notes: [ { category: "description", text: "Blink in Google Chrome prior to 55.0.2883.75 for Linux and Windows, and 55.0.2883.84 for Android allowed possible corruption of the DOM tree during synchronous event handling, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: universal xss in blink", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5208", }, { category: "external", summary: "RHBZ#1400851", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400851", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5208", url: "https://www.cve.org/CVERecord?id=CVE-2016-5208", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5208", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5208", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: universal xss in blink", }, { cve: "CVE-2016-5209", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400856", }, ], notes: [ { category: "description", text: "Bad casting in bitmap manipulation in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: out of bounds write in blink", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5209", }, { category: "external", summary: "RHBZ#1400856", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400856", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5209", url: "https://www.cve.org/CVERecord?id=CVE-2016-5209", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5209", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5209", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: out of bounds write in blink", }, { cve: "CVE-2016-5210", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400859", }, ], notes: [ { category: "description", text: "Heap buffer overflow during TIFF image parsing in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: out of bounds write in pdfium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5210", }, { category: "external", summary: "RHBZ#1400859", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400859", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5210", url: "https://www.cve.org/CVERecord?id=CVE-2016-5210", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5210", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5210", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: out of bounds write in pdfium", }, { cve: "CVE-2016-5211", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400862", }, ], notes: [ { category: "description", text: "A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: use after free in pdfium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5211", }, { category: "external", summary: "RHBZ#1400862", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400862", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5211", url: "https://www.cve.org/CVERecord?id=CVE-2016-5211", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5211", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5211", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: use after free in pdfium", }, { cve: "CVE-2016-5212", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400861", }, ], notes: [ { category: "description", text: "Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android insufficiently sanitized DevTools URLs, which allowed a remote attacker to read local files via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: local file disclosure in devtools", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5212", }, { category: "external", summary: "RHBZ#1400861", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400861", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5212", url: "https://www.cve.org/CVERecord?id=CVE-2016-5212", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5212", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5212", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: local file disclosure in devtools", }, { cve: "CVE-2016-5213", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400863", }, ], notes: [ { category: "description", text: "A use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: use after free in v8", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5213", }, { category: "external", summary: "RHBZ#1400863", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400863", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5213", url: "https://www.cve.org/CVERecord?id=CVE-2016-5213", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5213", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5213", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: use after free in v8", }, { cve: "CVE-2016-5214", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400864", }, ], notes: [ { category: "description", text: "Google Chrome prior to 55.0.2883.75 for Windows mishandled downloaded files, which allowed a remote attacker to prevent the downloaded file from receiving the Mark of the Web via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: file download protection bypass", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5214", }, { category: "external", summary: "RHBZ#1400864", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400864", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5214", url: "https://www.cve.org/CVERecord?id=CVE-2016-5214", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5214", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5214", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: file download protection bypass", }, { cve: "CVE-2016-5215", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400866", }, ], notes: [ { category: "description", text: "A use after free in webaudio in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: use after free in webaudio", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5215", }, { category: "external", summary: "RHBZ#1400866", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400866", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5215", url: "https://www.cve.org/CVERecord?id=CVE-2016-5215", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5215", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5215", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: use after free in webaudio", }, { cve: "CVE-2016-5216", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400865", }, ], notes: [ { category: "description", text: "A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: use after free in pdfium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5216", }, { category: "external", summary: "RHBZ#1400865", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400865", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5216", url: "https://www.cve.org/CVERecord?id=CVE-2016-5216", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5216", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5216", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: use after free in pdfium", }, { cve: "CVE-2016-5217", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400867", }, ], notes: [ { category: "description", text: "The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly permitted access to privileged plugins, which allowed a remote attacker to bypass site isolation via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: use of unvalidated data in pdfium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5217", }, { category: "external", summary: "RHBZ#1400867", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400867", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5217", url: "https://www.cve.org/CVERecord?id=CVE-2016-5217", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5217", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5217", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: use of unvalidated data in pdfium", }, { cve: "CVE-2016-5218", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400868", }, ], notes: [ { category: "description", text: "The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation within PDFs, which allowed a remote attacker to temporarily spoof the contents of the Omnibox (URL bar) via a crafted HTML page containing PDF data.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: address spoofing in omnibox", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5218", }, { category: "external", summary: "RHBZ#1400868", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400868", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5218", url: "https://www.cve.org/CVERecord?id=CVE-2016-5218", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5218", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5218", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: address spoofing in omnibox", }, { cve: "CVE-2016-5219", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400869", }, ], notes: [ { category: "description", text: "A heap use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: use after free in v8", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5219", }, { category: "external", summary: "RHBZ#1400869", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400869", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5219", url: "https://www.cve.org/CVERecord?id=CVE-2016-5219", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5219", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5219", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: use after free in v8", }, { cve: "CVE-2016-5220", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400871", }, ], notes: [ { category: "description", text: "PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation within PDFs, which allowed a remote attacker to read local files via a crafted PDF file.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: local file access in pdfium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5220", }, { category: "external", summary: "RHBZ#1400871", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400871", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5220", url: "https://www.cve.org/CVERecord?id=CVE-2016-5220", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5220", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5220", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: local file access in pdfium", }, { cve: "CVE-2016-5221", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400870", }, ], notes: [ { category: "description", text: "Type confusion in libGLESv2 in ANGLE in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android possibly allowed a remote attacker to bypass buffer validation via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: integer overflow in angle", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5221", }, { category: "external", summary: "RHBZ#1400870", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400870", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5221", url: "https://www.cve.org/CVERecord?id=CVE-2016-5221", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5221", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5221", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: integer overflow in angle", }, { cve: "CVE-2016-5222", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400872", }, ], notes: [ { category: "description", text: "Incorrect handling of invalid URLs in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: address spoofing in omnibox", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5222", }, { category: "external", summary: "RHBZ#1400872", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400872", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5222", url: "https://www.cve.org/CVERecord?id=CVE-2016-5222", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5222", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5222", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 4.3, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:P/I:N/A:N", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 6.5, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "chromium-browser: address spoofing in omnibox", }, { cve: "CVE-2016-5223", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400875", }, ], notes: [ { category: "description", text: "Integer overflow in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption or DoS via a crafted PDF file.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: integer overflow in pdfium", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5223", }, { category: "external", summary: "RHBZ#1400875", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400875", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5223", url: "https://www.cve.org/CVERecord?id=CVE-2016-5223", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5223", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5223", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "chromium-browser: integer overflow in pdfium", }, { cve: "CVE-2016-5224", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400878", }, ], notes: [ { category: "description", text: "A timing attack on denormalized floating point arithmetic in SVG filters in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: same-origin bypass in svg", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5224", }, { category: "external", summary: "RHBZ#1400878", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400878", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5224", url: "https://www.cve.org/CVERecord?id=CVE-2016-5224", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5224", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5224", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "chromium-browser: same-origin bypass in svg", }, { cve: "CVE-2016-5225", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400877", }, ], notes: [ { category: "description", text: "Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled form actions, which allowed a remote attacker to bypass Content Security Policy via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: csp bypass in blink", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5225", }, { category: "external", summary: "RHBZ#1400877", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400877", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5225", url: "https://www.cve.org/CVERecord?id=CVE-2016-5225", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5225", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5225", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "chromium-browser: csp bypass in blink", }, { cve: "CVE-2016-5226", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400876", }, ], notes: [ { category: "description", text: "Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac executed javascript: URLs entered in the URL bar in the context of the current tab, which allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: limited xss in blink", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-5226", }, { category: "external", summary: "RHBZ#1400876", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400876", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-5226", url: "https://www.cve.org/CVERecord?id=CVE-2016-5226", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-5226", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-5226", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "chromium-browser: limited xss in blink", }, { cve: "CVE-2016-9650", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400873", }, ], notes: [ { category: "description", text: "Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled iframes, which allowed a remote attacker to bypass a no-referrer policy via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: csp referrer disclosure", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-9650", }, { category: "external", summary: "RHBZ#1400873", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400873", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-9650", url: "https://www.cve.org/CVERecord?id=CVE-2016-9650", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-9650", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-9650", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 4.3, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:M/Au:N/C:N/I:N/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 4.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "chromium-browser: csp referrer disclosure", }, { cve: "CVE-2016-9651", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400850", }, ], notes: [ { category: "description", text: "A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: private property access in v8", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-9651", }, { category: "external", summary: "RHBZ#1400850", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400850", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-9651", url: "https://www.cve.org/CVERecord?id=CVE-2016-9651", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-9651", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-9651", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: private property access in v8", }, { cve: "CVE-2016-9652", discovery_date: "2016-12-01T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1400879", }, ], notes: [ { category: "description", text: "Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.", title: "Vulnerability description", }, { category: "summary", text: "chromium-browser: various fixes from internal audits", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2016-9652", }, { category: "external", summary: "RHBZ#1400879", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1400879", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2016-9652", url: "https://www.cve.org/CVERecord?id=CVE-2016-9652", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2016-9652", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-9652", }, { category: "external", summary: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", url: "https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html", }, ], release_date: "2016-12-01T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2016-12-07T19:08:13+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Chromium must be restarted for the changes to take effect.", product_ids: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2016:2919", }, ], scores: [ { cvss_v2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 6.8, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P", version: "2.0", }, cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Client-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Server-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-0:55.0.2883.75-1.el6.x86_64", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.i686", "6Workstation-Supplementary-6.8.z:chromium-browser-debuginfo-0:55.0.2883.75-1.el6.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "chromium-browser: various fixes from internal audits", }, ], }
gsd-2016-9652
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.
Aliases
Aliases
{ GSD: { alias: "CVE-2016-9652", description: "Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.", id: "GSD-2016-9652", references: [ "https://www.suse.com/security/cve/CVE-2016-9652.html", "https://www.debian.org/security/2016/dsa-3731", "https://access.redhat.com/errata/RHSA-2016:2919", "https://ubuntu.com/security/CVE-2016-9652", "https://advisories.mageia.org/CVE-2016-9652.html", "https://security.archlinux.org/CVE-2016-9652", ], }, gsd: { metadata: { exploitCode: "unknown", remediation: "unknown", reportConfidence: "confirmed", type: "vulnerability", }, osvSchema: { aliases: [ "CVE-2016-9652", ], details: "Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.", id: "GSD-2016-9652", modified: "2023-12-13T01:21:21.983562Z", schema_version: "1.4.0", }, }, namespaces: { "cve.org": { CVE_data_meta: { ASSIGNER: "security@google.com", ID: "CVE-2016-9652", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "Chrome", version: { version_data: [ { version_value: "55.0", }, ], }, }, ], }, vendor_name: "Google", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "mixed", }, ], }, ], }, references: { reference_data: [ { name: "https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html", refsource: "CONFIRM", url: "https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html", }, { name: "http://www.debian.org/security/2016/dsa-3731", refsource: "MISC", url: "http://www.debian.org/security/2016/dsa-3731", }, { name: "http://www.securityfocus.com/bid/94633", refsource: "MISC", url: "http://www.securityfocus.com/bid/94633", }, { name: "http://rhn.redhat.com/errata/RHSA-2016-2919.html", refsource: "MISC", url: "http://rhn.redhat.com/errata/RHSA-2016-2919.html", }, { name: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LV2U7SINGF3SBK7HVKSWFOYLQBUH6PUE/", refsource: "MISC", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LV2U7SINGF3SBK7HVKSWFOYLQBUH6PUE/", }, { name: "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html", refsource: "MISC", url: "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html", }, { name: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7LGZO2VOGJOZUUXNQITD6YMIUQ2L5GTU/", refsource: "MISC", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7LGZO2VOGJOZUUXNQITD6YMIUQ2L5GTU/", }, { name: "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html", refsource: "MISC", url: "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html", }, { name: "https://security.gentoo.org/glsa/201612-11", refsource: "MISC", url: "https://security.gentoo.org/glsa/201612-11", }, { name: "http://www.ubuntu.com/usn/USN-3153-1", refsource: "MISC", url: "http://www.ubuntu.com/usn/USN-3153-1", }, { name: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZZECS3A7ULG4B4YXBKUZMA3NTQBE5HGU/", refsource: "MISC", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZZECS3A7ULG4B4YXBKUZMA3NTQBE5HGU/", }, { name: "https://bugs.chromium.org/p/chromium/issues/detail?id=669928", refsource: "CONFIRM", url: "https://bugs.chromium.org/p/chromium/issues/detail?id=669928", }, ], }, }, "nvd.nist.gov": { configurations: { CVE_data_version: "4.0", nodes: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", cpe_name: [], versionEndExcluding: "55.0.2883.75", vulnerable: true, }, ], operator: "OR", }, ], }, cve: { CVE_data_meta: { ASSIGNER: "security@google.com", ID: "CVE-2016-9652", }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "en", value: "Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "en", value: "NVD-CWE-noinfo", }, ], }, ], }, references: { reference_data: [ { name: "https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html", refsource: "CONFIRM", tags: [ "Vendor Advisory", ], url: "https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html", }, { name: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZZECS3A7ULG4B4YXBKUZMA3NTQBE5HGU/", refsource: "MISC", tags: [], url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZZECS3A7ULG4B4YXBKUZMA3NTQBE5HGU/", }, { name: "http://www.debian.org/security/2016/dsa-3731", refsource: "MISC", tags: [], url: "http://www.debian.org/security/2016/dsa-3731", }, { name: "http://rhn.redhat.com/errata/RHSA-2016-2919.html", refsource: "MISC", tags: [], url: "http://rhn.redhat.com/errata/RHSA-2016-2919.html", }, { name: "http://www.ubuntu.com/usn/USN-3153-1", refsource: "MISC", tags: [], url: "http://www.ubuntu.com/usn/USN-3153-1", }, { name: "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html", refsource: "MISC", tags: [], url: "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html", }, { name: "http://www.securityfocus.com/bid/94633", refsource: "MISC", tags: [], url: "http://www.securityfocus.com/bid/94633", }, { name: "https://bugs.chromium.org/p/chromium/issues/detail?id=669928", refsource: "CONFIRM", tags: [], url: "https://bugs.chromium.org/p/chromium/issues/detail?id=669928", }, { name: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7LGZO2VOGJOZUUXNQITD6YMIUQ2L5GTU/", refsource: "MISC", tags: [], url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7LGZO2VOGJOZUUXNQITD6YMIUQ2L5GTU/", }, { name: "https://security.gentoo.org/glsa/201612-11", refsource: "MISC", tags: [], url: "https://security.gentoo.org/glsa/201612-11", }, { name: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LV2U7SINGF3SBK7HVKSWFOYLQBUH6PUE/", refsource: "MISC", tags: [], url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LV2U7SINGF3SBK7HVKSWFOYLQBUH6PUE/", }, { name: "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html", refsource: "MISC", tags: [], url: "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html", }, ], }, }, impact: { baseMetricV2: { acInsufInfo: false, cvssV2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "COMPLETE", baseScore: 10, confidentialityImpact: "COMPLETE", integrityImpact: "COMPLETE", vectorString: "AV:N/AC:L/Au:N/C:C/I:C/A:C", version: "2.0", }, exploitabilityScore: 10, impactScore: 10, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, severity: "HIGH", userInteractionRequired: false, }, baseMetricV3: { cvssV3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, exploitabilityScore: 3.9, impactScore: 5.9, }, }, lastModifiedDate: "2020-02-07T21:15Z", publishedDate: "2019-11-20T15:15Z", }, }, }
opensuse-su-2024:10171-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
chromedriver-55.0.2883.75-3.1 on GA media
Notes
Title of the patch
chromedriver-55.0.2883.75-3.1 on GA media
Description of the patch
These are all security issues fixed in the chromedriver-55.0.2883.75-3.1 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-10171
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "chromedriver-55.0.2883.75-3.1 on GA media", title: "Title of the patch", }, { category: "description", text: "These are all security issues fixed in the chromedriver-55.0.2883.75-3.1 package on the GA media of openSUSE Tumbleweed.", title: "Description of the patch", }, { category: "details", text: "openSUSE-Tumbleweed-2024-10171", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10171-1.json", }, { category: "self", summary: "SUSE CVE CVE-2011-3015 page", url: "https://www.suse.com/security/cve/CVE-2011-3015/", }, { category: "self", summary: "SUSE CVE CVE-2011-3016 page", url: "https://www.suse.com/security/cve/CVE-2011-3016/", }, { category: "self", summary: "SUSE CVE CVE-2011-3017 page", url: "https://www.suse.com/security/cve/CVE-2011-3017/", }, { category: "self", summary: "SUSE CVE CVE-2011-3018 page", url: "https://www.suse.com/security/cve/CVE-2011-3018/", }, { category: "self", summary: "SUSE CVE CVE-2011-3019 page", url: "https://www.suse.com/security/cve/CVE-2011-3019/", }, { category: "self", summary: "SUSE CVE CVE-2011-3020 page", url: "https://www.suse.com/security/cve/CVE-2011-3020/", }, { category: "self", summary: "SUSE CVE CVE-2011-3021 page", url: "https://www.suse.com/security/cve/CVE-2011-3021/", }, { category: "self", summary: "SUSE CVE CVE-2011-3022 page", url: "https://www.suse.com/security/cve/CVE-2011-3022/", }, { category: "self", summary: "SUSE CVE CVE-2011-3023 page", url: "https://www.suse.com/security/cve/CVE-2011-3023/", }, { category: "self", summary: "SUSE CVE CVE-2011-3024 page", url: "https://www.suse.com/security/cve/CVE-2011-3024/", }, { category: "self", summary: "SUSE CVE CVE-2011-3025 page", url: "https://www.suse.com/security/cve/CVE-2011-3025/", }, { category: "self", summary: "SUSE CVE CVE-2011-3026 page", url: "https://www.suse.com/security/cve/CVE-2011-3026/", }, { category: "self", summary: "SUSE CVE CVE-2011-3027 page", url: "https://www.suse.com/security/cve/CVE-2011-3027/", }, { category: "self", summary: "SUSE CVE CVE-2011-3031 page", url: "https://www.suse.com/security/cve/CVE-2011-3031/", }, { category: "self", summary: "SUSE CVE CVE-2011-3032 page", url: "https://www.suse.com/security/cve/CVE-2011-3032/", }, { category: "self", summary: "SUSE CVE CVE-2011-3033 page", url: "https://www.suse.com/security/cve/CVE-2011-3033/", }, { category: "self", summary: "SUSE CVE CVE-2011-3034 page", url: "https://www.suse.com/security/cve/CVE-2011-3034/", }, { category: "self", summary: "SUSE CVE CVE-2011-3035 page", url: "https://www.suse.com/security/cve/CVE-2011-3035/", }, { category: "self", summary: "SUSE CVE CVE-2011-3036 page", url: "https://www.suse.com/security/cve/CVE-2011-3036/", }, { category: "self", summary: "SUSE CVE CVE-2011-3037 page", url: "https://www.suse.com/security/cve/CVE-2011-3037/", }, { category: "self", summary: "SUSE CVE CVE-2011-3038 page", url: "https://www.suse.com/security/cve/CVE-2011-3038/", }, { category: "self", summary: "SUSE CVE CVE-2011-3039 page", url: "https://www.suse.com/security/cve/CVE-2011-3039/", }, { category: "self", summary: "SUSE CVE CVE-2011-3040 page", url: "https://www.suse.com/security/cve/CVE-2011-3040/", }, { category: "self", summary: "SUSE CVE CVE-2011-3041 page", url: "https://www.suse.com/security/cve/CVE-2011-3041/", }, { category: "self", summary: "SUSE CVE CVE-2011-3042 page", url: "https://www.suse.com/security/cve/CVE-2011-3042/", }, { category: "self", summary: "SUSE CVE CVE-2011-3043 page", url: "https://www.suse.com/security/cve/CVE-2011-3043/", }, { category: "self", summary: "SUSE CVE CVE-2011-3044 page", url: "https://www.suse.com/security/cve/CVE-2011-3044/", }, { category: "self", summary: "SUSE CVE CVE-2011-3045 page", url: "https://www.suse.com/security/cve/CVE-2011-3045/", }, { category: "self", summary: "SUSE CVE CVE-2011-3046 page", url: "https://www.suse.com/security/cve/CVE-2011-3046/", }, { category: "self", summary: "SUSE CVE CVE-2011-3047 page", url: "https://www.suse.com/security/cve/CVE-2011-3047/", }, { category: "self", summary: "SUSE CVE CVE-2011-3049 page", url: "https://www.suse.com/security/cve/CVE-2011-3049/", }, { category: "self", summary: "SUSE CVE CVE-2011-3050 page", url: "https://www.suse.com/security/cve/CVE-2011-3050/", }, { category: "self", summary: "SUSE CVE CVE-2011-3051 page", url: "https://www.suse.com/security/cve/CVE-2011-3051/", }, { category: "self", summary: "SUSE CVE CVE-2011-3052 page", url: "https://www.suse.com/security/cve/CVE-2011-3052/", }, { category: "self", summary: "SUSE CVE CVE-2011-3053 page", url: "https://www.suse.com/security/cve/CVE-2011-3053/", }, { category: "self", summary: "SUSE CVE CVE-2011-3054 page", url: "https://www.suse.com/security/cve/CVE-2011-3054/", }, { category: "self", summary: "SUSE CVE CVE-2011-3055 page", url: "https://www.suse.com/security/cve/CVE-2011-3055/", }, { category: "self", summary: "SUSE CVE CVE-2011-3056 page", url: "https://www.suse.com/security/cve/CVE-2011-3056/", }, { category: "self", summary: "SUSE CVE CVE-2011-3057 page", url: "https://www.suse.com/security/cve/CVE-2011-3057/", }, { category: "self", summary: "SUSE CVE CVE-2011-3058 page", url: "https://www.suse.com/security/cve/CVE-2011-3058/", }, { category: "self", summary: "SUSE CVE CVE-2011-3059 page", url: "https://www.suse.com/security/cve/CVE-2011-3059/", }, { category: "self", summary: "SUSE CVE CVE-2011-3060 page", url: "https://www.suse.com/security/cve/CVE-2011-3060/", }, { category: "self", summary: "SUSE CVE CVE-2011-3061 page", url: "https://www.suse.com/security/cve/CVE-2011-3061/", }, { category: "self", summary: "SUSE CVE CVE-2011-3062 page", url: "https://www.suse.com/security/cve/CVE-2011-3062/", }, { category: "self", summary: "SUSE CVE CVE-2011-3063 page", url: "https://www.suse.com/security/cve/CVE-2011-3063/", }, { category: "self", summary: "SUSE CVE CVE-2011-3064 page", url: "https://www.suse.com/security/cve/CVE-2011-3064/", }, { category: "self", summary: "SUSE CVE CVE-2011-3065 page", url: "https://www.suse.com/security/cve/CVE-2011-3065/", }, { category: "self", summary: "SUSE CVE CVE-2011-3066 page", url: "https://www.suse.com/security/cve/CVE-2011-3066/", }, { category: "self", summary: "SUSE CVE CVE-2011-3067 page", url: "https://www.suse.com/security/cve/CVE-2011-3067/", }, { category: "self", summary: "SUSE CVE CVE-2011-3068 page", url: "https://www.suse.com/security/cve/CVE-2011-3068/", }, { category: "self", summary: "SUSE CVE CVE-2011-3069 page", url: "https://www.suse.com/security/cve/CVE-2011-3069/", }, { category: "self", summary: "SUSE CVE CVE-2011-3070 page", url: "https://www.suse.com/security/cve/CVE-2011-3070/", }, { category: "self", summary: "SUSE CVE CVE-2011-3071 page", url: "https://www.suse.com/security/cve/CVE-2011-3071/", }, { category: "self", summary: "SUSE CVE CVE-2011-3072 page", url: "https://www.suse.com/security/cve/CVE-2011-3072/", }, { category: "self", summary: "SUSE CVE CVE-2011-3073 page", url: "https://www.suse.com/security/cve/CVE-2011-3073/", }, { category: "self", summary: "SUSE CVE CVE-2011-3074 page", url: "https://www.suse.com/security/cve/CVE-2011-3074/", }, { category: "self", summary: "SUSE CVE CVE-2011-3075 page", url: "https://www.suse.com/security/cve/CVE-2011-3075/", }, { category: "self", summary: "SUSE CVE CVE-2011-3076 page", url: "https://www.suse.com/security/cve/CVE-2011-3076/", }, { category: "self", summary: "SUSE CVE CVE-2011-3077 page", url: "https://www.suse.com/security/cve/CVE-2011-3077/", }, { category: "self", summary: "SUSE CVE CVE-2011-3078 page", url: "https://www.suse.com/security/cve/CVE-2011-3078/", }, { category: "self", summary: "SUSE CVE CVE-2011-3079 page", url: "https://www.suse.com/security/cve/CVE-2011-3079/", }, { category: "self", summary: "SUSE CVE CVE-2011-3080 page", url: "https://www.suse.com/security/cve/CVE-2011-3080/", }, { category: "self", summary: "SUSE CVE CVE-2011-3081 page", url: "https://www.suse.com/security/cve/CVE-2011-3081/", }, { category: "self", summary: "SUSE CVE CVE-2011-3083 page", url: "https://www.suse.com/security/cve/CVE-2011-3083/", }, { category: "self", summary: "SUSE CVE CVE-2011-3084 page", url: "https://www.suse.com/security/cve/CVE-2011-3084/", }, { category: "self", summary: "SUSE CVE CVE-2011-3085 page", url: "https://www.suse.com/security/cve/CVE-2011-3085/", }, { category: "self", summary: "SUSE CVE CVE-2011-3086 page", url: "https://www.suse.com/security/cve/CVE-2011-3086/", }, { category: "self", summary: "SUSE CVE CVE-2011-3087 page", url: "https://www.suse.com/security/cve/CVE-2011-3087/", }, { category: "self", summary: "SUSE CVE CVE-2011-3088 page", url: "https://www.suse.com/security/cve/CVE-2011-3088/", }, { category: "self", summary: "SUSE CVE CVE-2011-3089 page", url: "https://www.suse.com/security/cve/CVE-2011-3089/", }, { category: "self", summary: "SUSE CVE CVE-2011-3090 page", url: "https://www.suse.com/security/cve/CVE-2011-3090/", }, { category: "self", summary: "SUSE CVE CVE-2011-3091 page", url: "https://www.suse.com/security/cve/CVE-2011-3091/", }, { category: "self", summary: "SUSE CVE CVE-2011-3092 page", url: "https://www.suse.com/security/cve/CVE-2011-3092/", }, { category: "self", summary: "SUSE CVE CVE-2011-3093 page", url: "https://www.suse.com/security/cve/CVE-2011-3093/", }, { category: "self", summary: "SUSE CVE CVE-2011-3094 page", url: "https://www.suse.com/security/cve/CVE-2011-3094/", }, { category: "self", summary: "SUSE CVE CVE-2011-3095 page", url: "https://www.suse.com/security/cve/CVE-2011-3095/", }, { category: "self", summary: "SUSE CVE CVE-2011-3096 page", url: "https://www.suse.com/security/cve/CVE-2011-3096/", }, { category: "self", summary: "SUSE CVE CVE-2011-3098 page", url: "https://www.suse.com/security/cve/CVE-2011-3098/", }, { category: "self", summary: "SUSE CVE CVE-2011-3100 page", url: "https://www.suse.com/security/cve/CVE-2011-3100/", }, { category: "self", summary: "SUSE CVE CVE-2011-3101 page", url: "https://www.suse.com/security/cve/CVE-2011-3101/", }, { category: "self", summary: "SUSE CVE CVE-2011-3102 page", url: "https://www.suse.com/security/cve/CVE-2011-3102/", }, { category: "self", summary: "SUSE CVE CVE-2011-3903 page", url: "https://www.suse.com/security/cve/CVE-2011-3903/", }, { category: "self", summary: "SUSE CVE CVE-2011-3904 page", url: "https://www.suse.com/security/cve/CVE-2011-3904/", }, { category: "self", summary: "SUSE CVE CVE-2011-3905 page", url: "https://www.suse.com/security/cve/CVE-2011-3905/", }, { category: "self", summary: "SUSE CVE CVE-2011-3906 page", url: "https://www.suse.com/security/cve/CVE-2011-3906/", }, { category: "self", summary: "SUSE CVE CVE-2011-3907 page", url: "https://www.suse.com/security/cve/CVE-2011-3907/", }, { category: "self", summary: "SUSE CVE CVE-2011-3908 page", url: "https://www.suse.com/security/cve/CVE-2011-3908/", }, { category: "self", summary: "SUSE CVE CVE-2011-3909 page", url: "https://www.suse.com/security/cve/CVE-2011-3909/", }, { category: "self", summary: "SUSE CVE CVE-2011-3910 page", url: "https://www.suse.com/security/cve/CVE-2011-3910/", }, { category: "self", summary: "SUSE CVE CVE-2011-3911 page", url: "https://www.suse.com/security/cve/CVE-2011-3911/", }, { category: "self", summary: "SUSE CVE CVE-2011-3912 page", url: "https://www.suse.com/security/cve/CVE-2011-3912/", }, { category: "self", summary: "SUSE CVE CVE-2011-3914 page", url: "https://www.suse.com/security/cve/CVE-2011-3914/", }, { category: "self", summary: "SUSE CVE CVE-2011-3915 page", url: "https://www.suse.com/security/cve/CVE-2011-3915/", }, { category: "self", summary: "SUSE CVE CVE-2011-3916 page", url: "https://www.suse.com/security/cve/CVE-2011-3916/", }, { category: "self", summary: "SUSE CVE CVE-2011-3917 page", url: "https://www.suse.com/security/cve/CVE-2011-3917/", }, { category: "self", summary: "SUSE CVE CVE-2011-3919 page", url: "https://www.suse.com/security/cve/CVE-2011-3919/", }, { category: "self", summary: "SUSE CVE CVE-2011-3921 page", url: "https://www.suse.com/security/cve/CVE-2011-3921/", }, { category: "self", summary: "SUSE CVE CVE-2011-3922 page", url: "https://www.suse.com/security/cve/CVE-2011-3922/", }, { category: "self", summary: "SUSE CVE CVE-2011-3924 page", url: "https://www.suse.com/security/cve/CVE-2011-3924/", }, { category: "self", summary: "SUSE CVE CVE-2011-3925 page", url: "https://www.suse.com/security/cve/CVE-2011-3925/", }, { category: "self", summary: "SUSE CVE CVE-2011-3926 page", url: "https://www.suse.com/security/cve/CVE-2011-3926/", }, { category: "self", summary: "SUSE CVE CVE-2011-3927 page", url: "https://www.suse.com/security/cve/CVE-2011-3927/", }, { category: "self", summary: "SUSE CVE CVE-2011-3928 page", url: "https://www.suse.com/security/cve/CVE-2011-3928/", }, { category: "self", summary: "SUSE CVE CVE-2011-3953 page", url: "https://www.suse.com/security/cve/CVE-2011-3953/", }, { category: "self", summary: "SUSE CVE CVE-2011-3954 page", url: "https://www.suse.com/security/cve/CVE-2011-3954/", }, { category: "self", summary: "SUSE CVE CVE-2011-3955 page", url: "https://www.suse.com/security/cve/CVE-2011-3955/", }, { category: "self", summary: "SUSE CVE CVE-2011-3956 page", url: "https://www.suse.com/security/cve/CVE-2011-3956/", }, { category: "self", summary: "SUSE CVE CVE-2011-3957 page", url: "https://www.suse.com/security/cve/CVE-2011-3957/", }, { category: "self", summary: "SUSE CVE CVE-2011-3958 page", url: "https://www.suse.com/security/cve/CVE-2011-3958/", }, { category: "self", summary: "SUSE CVE CVE-2011-3959 page", url: "https://www.suse.com/security/cve/CVE-2011-3959/", }, { category: "self", summary: "SUSE CVE CVE-2011-3960 page", url: "https://www.suse.com/security/cve/CVE-2011-3960/", }, { category: "self", summary: "SUSE CVE CVE-2011-3961 page", url: "https://www.suse.com/security/cve/CVE-2011-3961/", }, { category: "self", summary: "SUSE CVE CVE-2011-3962 page", url: "https://www.suse.com/security/cve/CVE-2011-3962/", }, { category: "self", summary: "SUSE CVE CVE-2011-3963 page", url: "https://www.suse.com/security/cve/CVE-2011-3963/", }, { category: "self", summary: "SUSE CVE CVE-2011-3964 page", url: "https://www.suse.com/security/cve/CVE-2011-3964/", }, { category: "self", summary: "SUSE CVE CVE-2011-3965 page", url: "https://www.suse.com/security/cve/CVE-2011-3965/", }, { category: "self", summary: "SUSE CVE CVE-2011-3966 page", url: "https://www.suse.com/security/cve/CVE-2011-3966/", }, { category: "self", summary: "SUSE CVE CVE-2011-3967 page", url: "https://www.suse.com/security/cve/CVE-2011-3967/", }, { category: "self", summary: "SUSE CVE CVE-2011-3968 page", url: "https://www.suse.com/security/cve/CVE-2011-3968/", }, { category: "self", summary: "SUSE CVE CVE-2011-3969 page", url: "https://www.suse.com/security/cve/CVE-2011-3969/", }, { category: "self", summary: "SUSE CVE CVE-2011-3970 page", url: "https://www.suse.com/security/cve/CVE-2011-3970/", }, { category: "self", summary: "SUSE CVE CVE-2011-3971 page", url: "https://www.suse.com/security/cve/CVE-2011-3971/", }, { category: "self", summary: "SUSE CVE CVE-2011-3972 page", url: "https://www.suse.com/security/cve/CVE-2011-3972/", }, { category: "self", summary: "SUSE CVE CVE-2012-1521 page", url: "https://www.suse.com/security/cve/CVE-2012-1521/", }, { category: "self", summary: "SUSE CVE CVE-2012-2807 page", url: "https://www.suse.com/security/cve/CVE-2012-2807/", }, { category: "self", summary: "SUSE CVE CVE-2012-2815 page", url: "https://www.suse.com/security/cve/CVE-2012-2815/", }, { category: "self", summary: "SUSE CVE CVE-2012-2816 page", url: "https://www.suse.com/security/cve/CVE-2012-2816/", }, { category: "self", summary: "SUSE CVE CVE-2012-2817 page", url: "https://www.suse.com/security/cve/CVE-2012-2817/", }, { category: "self", summary: "SUSE CVE CVE-2012-2818 page", url: "https://www.suse.com/security/cve/CVE-2012-2818/", }, { category: "self", summary: "SUSE CVE CVE-2012-2819 page", url: "https://www.suse.com/security/cve/CVE-2012-2819/", }, { category: "self", summary: "SUSE CVE CVE-2012-2820 page", url: "https://www.suse.com/security/cve/CVE-2012-2820/", }, { category: "self", summary: "SUSE CVE CVE-2012-2821 page", url: "https://www.suse.com/security/cve/CVE-2012-2821/", }, { category: "self", summary: "SUSE CVE CVE-2012-2823 page", url: "https://www.suse.com/security/cve/CVE-2012-2823/", }, { category: "self", summary: "SUSE CVE CVE-2012-2825 page", url: "https://www.suse.com/security/cve/CVE-2012-2825/", }, { category: "self", summary: "SUSE CVE CVE-2012-2826 page", url: "https://www.suse.com/security/cve/CVE-2012-2826/", }, { category: "self", summary: "SUSE CVE CVE-2012-2829 page", url: "https://www.suse.com/security/cve/CVE-2012-2829/", }, { category: "self", summary: "SUSE CVE CVE-2012-2830 page", url: "https://www.suse.com/security/cve/CVE-2012-2830/", }, { category: "self", summary: "SUSE CVE CVE-2012-2831 page", url: "https://www.suse.com/security/cve/CVE-2012-2831/", }, { category: "self", summary: "SUSE CVE CVE-2012-2834 page", url: "https://www.suse.com/security/cve/CVE-2012-2834/", }, { category: "self", summary: "SUSE CVE CVE-2012-2842 page", url: "https://www.suse.com/security/cve/CVE-2012-2842/", }, { category: "self", summary: "SUSE CVE CVE-2012-2843 page", url: "https://www.suse.com/security/cve/CVE-2012-2843/", }, { category: "self", summary: "SUSE CVE CVE-2012-2865 page", url: "https://www.suse.com/security/cve/CVE-2012-2865/", }, { category: "self", summary: "SUSE CVE CVE-2012-2866 page", url: "https://www.suse.com/security/cve/CVE-2012-2866/", }, { category: "self", summary: "SUSE CVE CVE-2012-2867 page", url: "https://www.suse.com/security/cve/CVE-2012-2867/", }, { category: "self", summary: "SUSE CVE CVE-2012-2868 page", url: "https://www.suse.com/security/cve/CVE-2012-2868/", }, { category: "self", summary: "SUSE CVE CVE-2012-2869 page", url: "https://www.suse.com/security/cve/CVE-2012-2869/", }, { category: "self", summary: "SUSE CVE CVE-2012-2870 page", url: "https://www.suse.com/security/cve/CVE-2012-2870/", }, { category: "self", summary: "SUSE CVE CVE-2012-2871 page", url: "https://www.suse.com/security/cve/CVE-2012-2871/", }, { category: "self", summary: "SUSE CVE CVE-2012-2872 page", url: "https://www.suse.com/security/cve/CVE-2012-2872/", }, { category: "self", summary: "SUSE CVE CVE-2012-2874 page", url: "https://www.suse.com/security/cve/CVE-2012-2874/", }, { category: "self", summary: "SUSE CVE CVE-2012-2876 page", url: "https://www.suse.com/security/cve/CVE-2012-2876/", }, { category: "self", summary: "SUSE CVE CVE-2012-2877 page", url: "https://www.suse.com/security/cve/CVE-2012-2877/", }, { category: "self", summary: "SUSE CVE CVE-2012-2878 page", url: "https://www.suse.com/security/cve/CVE-2012-2878/", }, { category: "self", summary: "SUSE CVE CVE-2012-2879 page", url: "https://www.suse.com/security/cve/CVE-2012-2879/", }, { category: "self", summary: "SUSE CVE CVE-2012-2880 page", url: "https://www.suse.com/security/cve/CVE-2012-2880/", }, { category: "self", summary: "SUSE CVE CVE-2012-2881 page", url: "https://www.suse.com/security/cve/CVE-2012-2881/", }, { category: "self", summary: "SUSE CVE CVE-2012-2882 page", url: "https://www.suse.com/security/cve/CVE-2012-2882/", }, { category: "self", summary: "SUSE CVE CVE-2012-2883 page", url: "https://www.suse.com/security/cve/CVE-2012-2883/", }, { category: "self", summary: "SUSE CVE CVE-2012-2884 page", url: "https://www.suse.com/security/cve/CVE-2012-2884/", }, { category: "self", summary: "SUSE CVE CVE-2012-2885 page", url: "https://www.suse.com/security/cve/CVE-2012-2885/", }, { category: "self", summary: "SUSE CVE CVE-2012-2886 page", url: "https://www.suse.com/security/cve/CVE-2012-2886/", }, { category: "self", summary: "SUSE CVE CVE-2012-2887 page", url: "https://www.suse.com/security/cve/CVE-2012-2887/", }, { category: "self", summary: "SUSE CVE CVE-2012-2888 page", url: "https://www.suse.com/security/cve/CVE-2012-2888/", }, { category: "self", summary: "SUSE CVE CVE-2012-2889 page", url: "https://www.suse.com/security/cve/CVE-2012-2889/", }, { category: "self", summary: "SUSE CVE CVE-2012-2891 page", url: "https://www.suse.com/security/cve/CVE-2012-2891/", }, { category: "self", summary: "SUSE CVE CVE-2012-2892 page", url: "https://www.suse.com/security/cve/CVE-2012-2892/", }, { category: "self", summary: "SUSE CVE CVE-2012-2893 page", url: "https://www.suse.com/security/cve/CVE-2012-2893/", }, { category: "self", summary: "SUSE CVE CVE-2012-2894 page", url: "https://www.suse.com/security/cve/CVE-2012-2894/", }, { category: "self", summary: "SUSE CVE CVE-2012-2896 page", url: "https://www.suse.com/security/cve/CVE-2012-2896/", }, { category: "self", summary: "SUSE CVE CVE-2012-5130 page", url: "https://www.suse.com/security/cve/CVE-2012-5130/", }, { category: "self", summary: "SUSE CVE CVE-2012-5131 page", url: "https://www.suse.com/security/cve/CVE-2012-5131/", }, { category: "self", summary: "SUSE CVE CVE-2012-5132 page", url: "https://www.suse.com/security/cve/CVE-2012-5132/", }, { category: "self", summary: "SUSE CVE CVE-2012-5133 page", url: "https://www.suse.com/security/cve/CVE-2012-5133/", }, { category: "self", summary: "SUSE CVE CVE-2012-5134 page", url: "https://www.suse.com/security/cve/CVE-2012-5134/", }, { category: "self", summary: "SUSE CVE CVE-2012-5135 page", url: "https://www.suse.com/security/cve/CVE-2012-5135/", }, { category: "self", summary: "SUSE CVE CVE-2012-5136 page", url: "https://www.suse.com/security/cve/CVE-2012-5136/", }, { category: "self", summary: "SUSE CVE CVE-2012-5137 page", url: "https://www.suse.com/security/cve/CVE-2012-5137/", }, { category: "self", summary: "SUSE CVE CVE-2012-5138 page", url: "https://www.suse.com/security/cve/CVE-2012-5138/", }, { category: "self", summary: "SUSE CVE CVE-2012-5139 page", url: "https://www.suse.com/security/cve/CVE-2012-5139/", }, { category: "self", summary: "SUSE CVE CVE-2012-5140 page", url: "https://www.suse.com/security/cve/CVE-2012-5140/", }, { category: "self", summary: "SUSE CVE CVE-2012-5141 page", url: "https://www.suse.com/security/cve/CVE-2012-5141/", }, { category: "self", summary: "SUSE CVE CVE-2012-5142 page", url: "https://www.suse.com/security/cve/CVE-2012-5142/", }, { category: "self", summary: "SUSE CVE CVE-2012-5143 page", url: "https://www.suse.com/security/cve/CVE-2012-5143/", }, { category: "self", summary: "SUSE CVE CVE-2012-5144 page", url: "https://www.suse.com/security/cve/CVE-2012-5144/", }, { category: "self", summary: "SUSE CVE CVE-2012-5145 page", url: "https://www.suse.com/security/cve/CVE-2012-5145/", }, { category: "self", summary: "SUSE CVE CVE-2012-5146 page", url: "https://www.suse.com/security/cve/CVE-2012-5146/", }, { category: "self", summary: "SUSE CVE CVE-2012-5147 page", url: "https://www.suse.com/security/cve/CVE-2012-5147/", }, { category: "self", summary: "SUSE CVE CVE-2012-5148 page", url: "https://www.suse.com/security/cve/CVE-2012-5148/", }, { category: "self", summary: "SUSE CVE CVE-2012-5149 page", url: "https://www.suse.com/security/cve/CVE-2012-5149/", }, { category: "self", summary: "SUSE CVE CVE-2012-5150 page", url: "https://www.suse.com/security/cve/CVE-2012-5150/", }, { category: "self", summary: "SUSE CVE CVE-2012-5152 page", url: "https://www.suse.com/security/cve/CVE-2012-5152/", }, { category: "self", summary: "SUSE CVE CVE-2012-5153 page", url: "https://www.suse.com/security/cve/CVE-2012-5153/", }, { category: "self", summary: "SUSE CVE CVE-2012-5154 page", url: "https://www.suse.com/security/cve/CVE-2012-5154/", }, { category: "self", summary: "SUSE CVE CVE-2013-0830 page", url: "https://www.suse.com/security/cve/CVE-2013-0830/", }, { category: "self", summary: "SUSE CVE CVE-2013-0831 page", url: "https://www.suse.com/security/cve/CVE-2013-0831/", }, { category: "self", summary: "SUSE CVE CVE-2013-0832 page", url: "https://www.suse.com/security/cve/CVE-2013-0832/", }, { category: "self", summary: "SUSE CVE CVE-2013-0833 page", url: "https://www.suse.com/security/cve/CVE-2013-0833/", }, { category: "self", summary: "SUSE CVE CVE-2013-0834 page", url: "https://www.suse.com/security/cve/CVE-2013-0834/", }, { category: "self", summary: "SUSE CVE CVE-2013-0835 page", url: "https://www.suse.com/security/cve/CVE-2013-0835/", }, { category: "self", summary: "SUSE CVE CVE-2013-0836 page", url: "https://www.suse.com/security/cve/CVE-2013-0836/", }, { category: "self", summary: "SUSE CVE CVE-2013-0837 page", url: "https://www.suse.com/security/cve/CVE-2013-0837/", }, { category: "self", summary: "SUSE CVE CVE-2013-0838 page", url: "https://www.suse.com/security/cve/CVE-2013-0838/", }, { category: "self", summary: "SUSE CVE CVE-2013-0879 page", url: "https://www.suse.com/security/cve/CVE-2013-0879/", }, { category: "self", summary: "SUSE CVE CVE-2013-0880 page", url: "https://www.suse.com/security/cve/CVE-2013-0880/", }, { category: "self", summary: "SUSE CVE CVE-2013-0881 page", url: "https://www.suse.com/security/cve/CVE-2013-0881/", }, { category: "self", summary: "SUSE CVE CVE-2013-0882 page", url: "https://www.suse.com/security/cve/CVE-2013-0882/", }, { category: "self", summary: "SUSE CVE CVE-2013-0883 page", url: "https://www.suse.com/security/cve/CVE-2013-0883/", }, { category: "self", summary: "SUSE CVE CVE-2013-0884 page", url: "https://www.suse.com/security/cve/CVE-2013-0884/", }, { category: "self", summary: "SUSE CVE CVE-2013-0885 page", url: "https://www.suse.com/security/cve/CVE-2013-0885/", }, { category: "self", summary: "SUSE CVE CVE-2013-0886 page", url: "https://www.suse.com/security/cve/CVE-2013-0886/", }, { category: "self", summary: "SUSE CVE CVE-2013-0887 page", url: "https://www.suse.com/security/cve/CVE-2013-0887/", }, { category: "self", summary: "SUSE CVE CVE-2013-0888 page", url: "https://www.suse.com/security/cve/CVE-2013-0888/", }, { category: "self", summary: "SUSE CVE CVE-2013-0889 page", url: "https://www.suse.com/security/cve/CVE-2013-0889/", }, { category: "self", summary: "SUSE CVE CVE-2013-0890 page", url: "https://www.suse.com/security/cve/CVE-2013-0890/", }, { category: "self", summary: "SUSE CVE CVE-2013-0891 page", url: "https://www.suse.com/security/cve/CVE-2013-0891/", }, { category: "self", summary: "SUSE CVE CVE-2013-0892 page", url: "https://www.suse.com/security/cve/CVE-2013-0892/", }, { category: "self", summary: "SUSE CVE CVE-2013-0893 page", url: "https://www.suse.com/security/cve/CVE-2013-0893/", }, { category: "self", summary: "SUSE CVE CVE-2013-0894 page", url: "https://www.suse.com/security/cve/CVE-2013-0894/", }, { category: "self", summary: "SUSE CVE CVE-2013-0895 page", url: "https://www.suse.com/security/cve/CVE-2013-0895/", }, { category: "self", summary: "SUSE CVE CVE-2013-0896 page", url: "https://www.suse.com/security/cve/CVE-2013-0896/", }, { category: "self", summary: "SUSE CVE CVE-2013-0897 page", url: "https://www.suse.com/security/cve/CVE-2013-0897/", }, { category: "self", summary: "SUSE CVE CVE-2013-0898 page", url: "https://www.suse.com/security/cve/CVE-2013-0898/", }, { category: "self", summary: "SUSE CVE CVE-2013-0899 page", url: "https://www.suse.com/security/cve/CVE-2013-0899/", }, { category: "self", summary: "SUSE CVE CVE-2013-0900 page", url: "https://www.suse.com/security/cve/CVE-2013-0900/", }, { category: "self", summary: "SUSE CVE CVE-2013-2838 page", url: "https://www.suse.com/security/cve/CVE-2013-2838/", }, { category: "self", summary: "SUSE CVE CVE-2013-2906 page", url: "https://www.suse.com/security/cve/CVE-2013-2906/", }, { category: "self", summary: "SUSE CVE CVE-2013-2907 page", url: "https://www.suse.com/security/cve/CVE-2013-2907/", }, { category: "self", summary: "SUSE CVE CVE-2013-2908 page", url: "https://www.suse.com/security/cve/CVE-2013-2908/", }, { category: "self", summary: "SUSE CVE CVE-2013-2909 page", url: "https://www.suse.com/security/cve/CVE-2013-2909/", }, { category: "self", summary: "SUSE CVE CVE-2013-2910 page", url: "https://www.suse.com/security/cve/CVE-2013-2910/", }, { category: "self", summary: "SUSE CVE CVE-2013-2911 page", url: "https://www.suse.com/security/cve/CVE-2013-2911/", }, { category: "self", summary: "SUSE CVE CVE-2013-2912 page", url: "https://www.suse.com/security/cve/CVE-2013-2912/", }, { category: "self", summary: "SUSE CVE CVE-2013-2913 page", url: "https://www.suse.com/security/cve/CVE-2013-2913/", }, { category: "self", summary: "SUSE CVE CVE-2013-2914 page", url: "https://www.suse.com/security/cve/CVE-2013-2914/", }, { category: "self", summary: "SUSE CVE CVE-2013-2915 page", url: "https://www.suse.com/security/cve/CVE-2013-2915/", }, { category: "self", summary: "SUSE CVE CVE-2013-2916 page", url: "https://www.suse.com/security/cve/CVE-2013-2916/", }, { category: "self", summary: "SUSE CVE CVE-2013-2917 page", url: "https://www.suse.com/security/cve/CVE-2013-2917/", }, { category: "self", summary: "SUSE CVE CVE-2013-2918 page", url: "https://www.suse.com/security/cve/CVE-2013-2918/", }, { category: "self", summary: "SUSE CVE CVE-2013-2919 page", url: "https://www.suse.com/security/cve/CVE-2013-2919/", }, { category: "self", summary: "SUSE CVE CVE-2013-2920 page", url: "https://www.suse.com/security/cve/CVE-2013-2920/", }, { category: "self", summary: "SUSE CVE CVE-2013-2921 page", url: "https://www.suse.com/security/cve/CVE-2013-2921/", }, { category: "self", summary: "SUSE CVE CVE-2013-2922 page", url: "https://www.suse.com/security/cve/CVE-2013-2922/", }, { category: "self", summary: "SUSE CVE CVE-2013-2923 page", url: "https://www.suse.com/security/cve/CVE-2013-2923/", }, { category: "self", summary: "SUSE CVE CVE-2013-2924 page", url: "https://www.suse.com/security/cve/CVE-2013-2924/", }, { category: "self", summary: "SUSE CVE CVE-2013-2925 page", url: "https://www.suse.com/security/cve/CVE-2013-2925/", }, { category: "self", summary: "SUSE CVE CVE-2013-2926 page", url: "https://www.suse.com/security/cve/CVE-2013-2926/", }, { category: "self", summary: "SUSE CVE CVE-2013-2927 page", url: "https://www.suse.com/security/cve/CVE-2013-2927/", }, { category: "self", summary: "SUSE CVE CVE-2013-2928 page", url: "https://www.suse.com/security/cve/CVE-2013-2928/", }, { category: "self", summary: "SUSE CVE CVE-2013-2931 page", url: "https://www.suse.com/security/cve/CVE-2013-2931/", }, { category: "self", summary: "SUSE CVE CVE-2013-6621 page", url: "https://www.suse.com/security/cve/CVE-2013-6621/", }, { category: "self", summary: "SUSE CVE CVE-2013-6622 page", url: "https://www.suse.com/security/cve/CVE-2013-6622/", }, { category: "self", summary: "SUSE CVE CVE-2013-6623 page", url: "https://www.suse.com/security/cve/CVE-2013-6623/", }, { category: "self", summary: "SUSE CVE CVE-2013-6624 page", url: "https://www.suse.com/security/cve/CVE-2013-6624/", }, { category: "self", summary: "SUSE CVE CVE-2013-6625 page", url: "https://www.suse.com/security/cve/CVE-2013-6625/", }, { category: "self", summary: "SUSE CVE CVE-2013-6626 page", url: "https://www.suse.com/security/cve/CVE-2013-6626/", }, { category: "self", summary: "SUSE CVE CVE-2013-6627 page", url: "https://www.suse.com/security/cve/CVE-2013-6627/", }, { category: "self", summary: "SUSE CVE CVE-2013-6628 page", url: "https://www.suse.com/security/cve/CVE-2013-6628/", }, { category: "self", summary: "SUSE CVE CVE-2013-6629 page", url: "https://www.suse.com/security/cve/CVE-2013-6629/", }, { category: "self", summary: "SUSE CVE CVE-2013-6630 page", url: "https://www.suse.com/security/cve/CVE-2013-6630/", }, { category: "self", summary: "SUSE CVE CVE-2013-6631 page", url: "https://www.suse.com/security/cve/CVE-2013-6631/", }, { category: "self", summary: "SUSE CVE CVE-2013-6632 page", url: "https://www.suse.com/security/cve/CVE-2013-6632/", }, { category: "self", summary: "SUSE CVE CVE-2013-6634 page", url: "https://www.suse.com/security/cve/CVE-2013-6634/", }, { category: "self", summary: "SUSE CVE CVE-2013-6635 page", url: "https://www.suse.com/security/cve/CVE-2013-6635/", }, { category: "self", summary: "SUSE CVE CVE-2013-6636 page", url: "https://www.suse.com/security/cve/CVE-2013-6636/", }, { category: "self", summary: "SUSE CVE CVE-2013-6637 page", url: "https://www.suse.com/security/cve/CVE-2013-6637/", }, { category: "self", summary: "SUSE CVE CVE-2013-6638 page", url: "https://www.suse.com/security/cve/CVE-2013-6638/", }, { category: "self", summary: "SUSE CVE CVE-2013-6639 page", url: "https://www.suse.com/security/cve/CVE-2013-6639/", }, { category: "self", summary: "SUSE CVE CVE-2013-6640 page", url: "https://www.suse.com/security/cve/CVE-2013-6640/", }, { category: "self", summary: "SUSE CVE CVE-2013-6641 page", url: "https://www.suse.com/security/cve/CVE-2013-6641/", }, { category: "self", summary: "SUSE CVE CVE-2013-6643 page", url: "https://www.suse.com/security/cve/CVE-2013-6643/", }, { category: "self", summary: "SUSE CVE CVE-2013-6644 page", url: "https://www.suse.com/security/cve/CVE-2013-6644/", }, { category: "self", summary: "SUSE CVE CVE-2013-6645 page", url: "https://www.suse.com/security/cve/CVE-2013-6645/", }, { category: "self", summary: "SUSE CVE CVE-2013-6646 page", url: "https://www.suse.com/security/cve/CVE-2013-6646/", }, { category: "self", summary: "SUSE CVE CVE-2013-6649 page", url: "https://www.suse.com/security/cve/CVE-2013-6649/", }, { category: "self", summary: "SUSE CVE CVE-2013-6650 page", url: "https://www.suse.com/security/cve/CVE-2013-6650/", }, { category: "self", summary: "SUSE CVE CVE-2013-6653 page", url: "https://www.suse.com/security/cve/CVE-2013-6653/", }, { category: "self", summary: "SUSE CVE CVE-2013-6654 page", url: "https://www.suse.com/security/cve/CVE-2013-6654/", }, { category: "self", summary: "SUSE CVE CVE-2013-6655 page", url: "https://www.suse.com/security/cve/CVE-2013-6655/", }, { category: "self", summary: "SUSE CVE CVE-2013-6656 page", url: "https://www.suse.com/security/cve/CVE-2013-6656/", }, { category: "self", summary: "SUSE CVE CVE-2013-6657 page", url: "https://www.suse.com/security/cve/CVE-2013-6657/", }, { category: "self", summary: "SUSE CVE CVE-2013-6658 page", url: "https://www.suse.com/security/cve/CVE-2013-6658/", }, { category: "self", summary: "SUSE CVE CVE-2013-6659 page", url: "https://www.suse.com/security/cve/CVE-2013-6659/", }, { category: "self", summary: "SUSE CVE CVE-2013-6660 page", url: "https://www.suse.com/security/cve/CVE-2013-6660/", }, { category: "self", summary: "SUSE CVE CVE-2013-6661 page", url: "https://www.suse.com/security/cve/CVE-2013-6661/", }, { category: "self", summary: "SUSE CVE CVE-2014-0574 page", url: "https://www.suse.com/security/cve/CVE-2014-0574/", }, { category: "self", summary: "SUSE CVE CVE-2014-1700 page", url: "https://www.suse.com/security/cve/CVE-2014-1700/", }, { category: "self", summary: "SUSE CVE CVE-2014-1701 page", url: "https://www.suse.com/security/cve/CVE-2014-1701/", }, { category: "self", summary: "SUSE CVE CVE-2014-1702 page", url: "https://www.suse.com/security/cve/CVE-2014-1702/", }, { category: "self", summary: "SUSE CVE CVE-2014-1703 page", url: "https://www.suse.com/security/cve/CVE-2014-1703/", }, { category: "self", summary: "SUSE CVE CVE-2014-1704 page", url: "https://www.suse.com/security/cve/CVE-2014-1704/", }, { category: "self", summary: "SUSE CVE CVE-2014-1705 page", url: "https://www.suse.com/security/cve/CVE-2014-1705/", }, { category: "self", summary: "SUSE CVE CVE-2014-1713 page", url: "https://www.suse.com/security/cve/CVE-2014-1713/", }, { category: "self", summary: "SUSE CVE CVE-2014-1714 page", url: "https://www.suse.com/security/cve/CVE-2014-1714/", }, { category: "self", summary: "SUSE CVE CVE-2014-1715 page", url: "https://www.suse.com/security/cve/CVE-2014-1715/", }, { category: "self", summary: "SUSE CVE CVE-2014-1716 page", url: "https://www.suse.com/security/cve/CVE-2014-1716/", }, { category: "self", summary: "SUSE CVE CVE-2014-1717 page", url: "https://www.suse.com/security/cve/CVE-2014-1717/", }, { category: "self", summary: "SUSE CVE CVE-2014-1718 page", url: "https://www.suse.com/security/cve/CVE-2014-1718/", }, { category: "self", summary: "SUSE CVE CVE-2014-1719 page", url: "https://www.suse.com/security/cve/CVE-2014-1719/", }, { category: "self", summary: "SUSE CVE CVE-2014-1720 page", url: "https://www.suse.com/security/cve/CVE-2014-1720/", }, { category: "self", summary: "SUSE CVE CVE-2014-1721 page", url: "https://www.suse.com/security/cve/CVE-2014-1721/", }, { category: "self", summary: "SUSE CVE CVE-2014-1722 page", url: "https://www.suse.com/security/cve/CVE-2014-1722/", }, { category: "self", summary: "SUSE CVE CVE-2014-1723 page", url: "https://www.suse.com/security/cve/CVE-2014-1723/", }, { category: "self", summary: "SUSE CVE CVE-2014-1724 page", url: "https://www.suse.com/security/cve/CVE-2014-1724/", }, { category: "self", summary: "SUSE CVE CVE-2014-1725 page", url: "https://www.suse.com/security/cve/CVE-2014-1725/", }, { category: "self", summary: "SUSE CVE CVE-2014-1726 page", url: "https://www.suse.com/security/cve/CVE-2014-1726/", }, { category: "self", summary: "SUSE CVE CVE-2014-1727 page", url: "https://www.suse.com/security/cve/CVE-2014-1727/", }, { category: "self", summary: "SUSE CVE CVE-2014-1728 page", url: "https://www.suse.com/security/cve/CVE-2014-1728/", }, { category: "self", summary: "SUSE CVE CVE-2014-1729 page", url: "https://www.suse.com/security/cve/CVE-2014-1729/", }, { category: "self", summary: "SUSE CVE CVE-2014-1730 page", url: "https://www.suse.com/security/cve/CVE-2014-1730/", }, { category: "self", summary: "SUSE CVE CVE-2014-1731 page", url: "https://www.suse.com/security/cve/CVE-2014-1731/", }, { category: "self", summary: "SUSE CVE CVE-2014-1732 page", url: "https://www.suse.com/security/cve/CVE-2014-1732/", }, { category: "self", summary: "SUSE CVE CVE-2014-1733 page", url: "https://www.suse.com/security/cve/CVE-2014-1733/", }, { category: "self", summary: "SUSE CVE CVE-2014-1734 page", url: "https://www.suse.com/security/cve/CVE-2014-1734/", }, { category: "self", summary: "SUSE CVE CVE-2014-1735 page", url: "https://www.suse.com/security/cve/CVE-2014-1735/", }, { category: "self", summary: "SUSE CVE CVE-2014-1740 page", url: "https://www.suse.com/security/cve/CVE-2014-1740/", }, { category: "self", summary: "SUSE CVE CVE-2014-1741 page", url: "https://www.suse.com/security/cve/CVE-2014-1741/", }, { category: "self", summary: "SUSE CVE CVE-2014-1742 page", url: "https://www.suse.com/security/cve/CVE-2014-1742/", }, { category: "self", summary: "SUSE CVE CVE-2014-1743 page", url: "https://www.suse.com/security/cve/CVE-2014-1743/", }, { category: "self", summary: "SUSE CVE CVE-2014-1744 page", url: "https://www.suse.com/security/cve/CVE-2014-1744/", }, { category: "self", summary: "SUSE CVE CVE-2014-1745 page", url: "https://www.suse.com/security/cve/CVE-2014-1745/", }, { category: "self", summary: "SUSE CVE CVE-2014-1746 page", url: "https://www.suse.com/security/cve/CVE-2014-1746/", }, { category: "self", summary: "SUSE CVE CVE-2014-1747 page", url: "https://www.suse.com/security/cve/CVE-2014-1747/", }, { category: "self", summary: "SUSE CVE CVE-2014-1748 page", url: "https://www.suse.com/security/cve/CVE-2014-1748/", }, { category: "self", summary: "SUSE CVE CVE-2014-1749 page", url: "https://www.suse.com/security/cve/CVE-2014-1749/", }, { category: "self", summary: "SUSE CVE CVE-2014-3152 page", url: "https://www.suse.com/security/cve/CVE-2014-3152/", }, { category: "self", summary: "SUSE CVE CVE-2014-3154 page", url: "https://www.suse.com/security/cve/CVE-2014-3154/", }, { category: "self", summary: "SUSE CVE CVE-2014-3155 page", url: "https://www.suse.com/security/cve/CVE-2014-3155/", }, { category: "self", summary: "SUSE CVE CVE-2014-3156 page", url: "https://www.suse.com/security/cve/CVE-2014-3156/", }, { category: "self", summary: "SUSE CVE CVE-2014-3157 page", url: "https://www.suse.com/security/cve/CVE-2014-3157/", }, { category: "self", summary: "SUSE CVE CVE-2014-3160 page", url: "https://www.suse.com/security/cve/CVE-2014-3160/", }, { category: "self", summary: "SUSE CVE CVE-2014-3162 page", url: "https://www.suse.com/security/cve/CVE-2014-3162/", }, { category: "self", summary: "SUSE CVE CVE-2014-3165 page", url: "https://www.suse.com/security/cve/CVE-2014-3165/", }, { category: "self", summary: "SUSE CVE CVE-2014-3166 page", url: "https://www.suse.com/security/cve/CVE-2014-3166/", }, { category: "self", summary: "SUSE CVE CVE-2014-3167 page", url: "https://www.suse.com/security/cve/CVE-2014-3167/", }, { category: "self", summary: "SUSE CVE CVE-2014-3168 page", url: "https://www.suse.com/security/cve/CVE-2014-3168/", }, { category: "self", summary: "SUSE CVE CVE-2014-3169 page", url: "https://www.suse.com/security/cve/CVE-2014-3169/", }, { category: "self", summary: "SUSE CVE CVE-2014-3170 page", url: "https://www.suse.com/security/cve/CVE-2014-3170/", }, { category: "self", summary: "SUSE CVE CVE-2014-3171 page", url: "https://www.suse.com/security/cve/CVE-2014-3171/", }, { category: "self", summary: "SUSE CVE CVE-2014-3172 page", url: "https://www.suse.com/security/cve/CVE-2014-3172/", }, { category: "self", summary: "SUSE CVE CVE-2014-3173 page", url: "https://www.suse.com/security/cve/CVE-2014-3173/", }, { category: "self", summary: "SUSE CVE CVE-2014-3174 page", url: "https://www.suse.com/security/cve/CVE-2014-3174/", }, { category: "self", summary: "SUSE CVE CVE-2014-3175 page", url: "https://www.suse.com/security/cve/CVE-2014-3175/", }, { category: "self", summary: "SUSE CVE CVE-2014-3176 page", url: "https://www.suse.com/security/cve/CVE-2014-3176/", }, { category: "self", summary: "SUSE CVE CVE-2014-3177 page", url: "https://www.suse.com/security/cve/CVE-2014-3177/", }, { category: "self", summary: "SUSE CVE CVE-2014-3178 page", url: "https://www.suse.com/security/cve/CVE-2014-3178/", }, { category: "self", summary: "SUSE CVE CVE-2014-3188 page", url: "https://www.suse.com/security/cve/CVE-2014-3188/", }, { category: "self", summary: "SUSE CVE CVE-2014-3189 page", url: "https://www.suse.com/security/cve/CVE-2014-3189/", }, { category: "self", summary: "SUSE CVE CVE-2014-3190 page", url: "https://www.suse.com/security/cve/CVE-2014-3190/", }, { category: "self", summary: "SUSE CVE CVE-2014-3191 page", url: "https://www.suse.com/security/cve/CVE-2014-3191/", }, { category: "self", summary: "SUSE CVE CVE-2014-3192 page", url: "https://www.suse.com/security/cve/CVE-2014-3192/", }, { category: "self", summary: "SUSE CVE CVE-2014-3193 page", url: "https://www.suse.com/security/cve/CVE-2014-3193/", }, { category: "self", summary: "SUSE CVE CVE-2014-3194 page", url: "https://www.suse.com/security/cve/CVE-2014-3194/", }, { category: "self", summary: "SUSE CVE CVE-2014-3195 page", url: "https://www.suse.com/security/cve/CVE-2014-3195/", }, { category: "self", summary: "SUSE CVE CVE-2014-3196 page", url: "https://www.suse.com/security/cve/CVE-2014-3196/", }, { category: "self", summary: "SUSE CVE CVE-2014-3197 page", url: "https://www.suse.com/security/cve/CVE-2014-3197/", }, { category: "self", summary: "SUSE CVE CVE-2014-3198 page", url: "https://www.suse.com/security/cve/CVE-2014-3198/", }, { category: "self", summary: "SUSE CVE CVE-2014-3199 page", url: "https://www.suse.com/security/cve/CVE-2014-3199/", }, { category: "self", summary: "SUSE CVE CVE-2014-3200 page", url: "https://www.suse.com/security/cve/CVE-2014-3200/", }, { category: "self", summary: "SUSE CVE CVE-2014-7899 page", url: "https://www.suse.com/security/cve/CVE-2014-7899/", }, { category: "self", summary: "SUSE CVE CVE-2014-7900 page", url: "https://www.suse.com/security/cve/CVE-2014-7900/", }, { category: "self", summary: "SUSE CVE CVE-2014-7901 page", url: "https://www.suse.com/security/cve/CVE-2014-7901/", }, { category: "self", summary: "SUSE CVE CVE-2014-7902 page", url: "https://www.suse.com/security/cve/CVE-2014-7902/", }, { category: "self", summary: "SUSE CVE CVE-2014-7903 page", url: "https://www.suse.com/security/cve/CVE-2014-7903/", }, { category: "self", summary: "SUSE CVE CVE-2014-7904 page", url: "https://www.suse.com/security/cve/CVE-2014-7904/", }, { category: "self", summary: "SUSE CVE CVE-2014-7905 page", url: "https://www.suse.com/security/cve/CVE-2014-7905/", }, { category: "self", summary: "SUSE CVE CVE-2014-7906 page", url: "https://www.suse.com/security/cve/CVE-2014-7906/", }, { category: "self", summary: "SUSE CVE CVE-2014-7907 page", url: "https://www.suse.com/security/cve/CVE-2014-7907/", }, { category: "self", summary: "SUSE CVE CVE-2014-7908 page", url: "https://www.suse.com/security/cve/CVE-2014-7908/", }, { category: "self", summary: "SUSE CVE CVE-2014-7909 page", url: "https://www.suse.com/security/cve/CVE-2014-7909/", }, { category: "self", summary: "SUSE CVE CVE-2014-7910 page", url: "https://www.suse.com/security/cve/CVE-2014-7910/", }, { category: "self", summary: "SUSE CVE CVE-2014-7923 page", url: "https://www.suse.com/security/cve/CVE-2014-7923/", }, { category: "self", summary: "SUSE CVE CVE-2014-7924 page", url: "https://www.suse.com/security/cve/CVE-2014-7924/", }, { category: "self", summary: "SUSE CVE CVE-2014-7925 page", url: "https://www.suse.com/security/cve/CVE-2014-7925/", }, { category: "self", summary: "SUSE CVE CVE-2014-7926 page", url: "https://www.suse.com/security/cve/CVE-2014-7926/", }, { category: "self", summary: "SUSE CVE CVE-2014-7927 page", url: "https://www.suse.com/security/cve/CVE-2014-7927/", }, { category: "self", summary: "SUSE CVE CVE-2014-7928 page", url: "https://www.suse.com/security/cve/CVE-2014-7928/", }, { category: "self", summary: "SUSE CVE CVE-2014-7929 page", url: "https://www.suse.com/security/cve/CVE-2014-7929/", }, { category: "self", summary: "SUSE CVE CVE-2014-7930 page", url: "https://www.suse.com/security/cve/CVE-2014-7930/", }, { category: "self", summary: "SUSE CVE CVE-2014-7932 page", url: "https://www.suse.com/security/cve/CVE-2014-7932/", }, { category: "self", summary: "SUSE CVE CVE-2014-7933 page", url: "https://www.suse.com/security/cve/CVE-2014-7933/", }, { category: "self", summary: "SUSE CVE CVE-2014-7934 page", url: "https://www.suse.com/security/cve/CVE-2014-7934/", }, { category: "self", summary: "SUSE CVE CVE-2014-7935 page", url: "https://www.suse.com/security/cve/CVE-2014-7935/", }, { category: "self", summary: "SUSE CVE CVE-2014-7936 page", url: "https://www.suse.com/security/cve/CVE-2014-7936/", }, { category: "self", summary: "SUSE CVE CVE-2014-7937 page", url: "https://www.suse.com/security/cve/CVE-2014-7937/", }, { category: "self", summary: "SUSE CVE CVE-2014-7938 page", url: "https://www.suse.com/security/cve/CVE-2014-7938/", }, { category: "self", summary: "SUSE CVE CVE-2014-7939 page", url: "https://www.suse.com/security/cve/CVE-2014-7939/", }, { category: "self", summary: "SUSE CVE CVE-2014-7940 page", url: "https://www.suse.com/security/cve/CVE-2014-7940/", }, { category: "self", summary: "SUSE CVE CVE-2014-7941 page", url: "https://www.suse.com/security/cve/CVE-2014-7941/", }, { category: "self", summary: "SUSE CVE CVE-2014-7942 page", url: "https://www.suse.com/security/cve/CVE-2014-7942/", }, { category: "self", summary: "SUSE CVE CVE-2014-7943 page", url: "https://www.suse.com/security/cve/CVE-2014-7943/", }, { category: "self", summary: "SUSE CVE CVE-2014-7944 page", url: "https://www.suse.com/security/cve/CVE-2014-7944/", }, { category: "self", summary: "SUSE CVE CVE-2014-7945 page", url: "https://www.suse.com/security/cve/CVE-2014-7945/", }, { category: "self", summary: "SUSE CVE CVE-2014-7946 page", url: "https://www.suse.com/security/cve/CVE-2014-7946/", }, { category: "self", summary: "SUSE CVE CVE-2014-7947 page", url: "https://www.suse.com/security/cve/CVE-2014-7947/", }, { category: "self", summary: "SUSE CVE CVE-2014-7948 page", url: "https://www.suse.com/security/cve/CVE-2014-7948/", }, { category: "self", summary: "SUSE CVE CVE-2015-1205 page", url: "https://www.suse.com/security/cve/CVE-2015-1205/", }, { category: "self", summary: "SUSE CVE CVE-2015-1209 page", url: "https://www.suse.com/security/cve/CVE-2015-1209/", }, { category: "self", summary: "SUSE CVE CVE-2015-1210 page", url: "https://www.suse.com/security/cve/CVE-2015-1210/", }, { category: "self", summary: "SUSE CVE CVE-2015-1211 page", url: "https://www.suse.com/security/cve/CVE-2015-1211/", }, { category: "self", summary: "SUSE CVE CVE-2015-1212 page", url: "https://www.suse.com/security/cve/CVE-2015-1212/", }, { category: "self", summary: "SUSE CVE CVE-2015-1213 page", url: "https://www.suse.com/security/cve/CVE-2015-1213/", }, { category: "self", summary: "SUSE CVE CVE-2015-1214 page", url: "https://www.suse.com/security/cve/CVE-2015-1214/", }, { category: "self", summary: "SUSE CVE CVE-2015-1215 page", url: "https://www.suse.com/security/cve/CVE-2015-1215/", }, { category: "self", summary: "SUSE CVE CVE-2015-1216 page", url: "https://www.suse.com/security/cve/CVE-2015-1216/", }, { category: "self", summary: "SUSE CVE CVE-2015-1217 page", url: "https://www.suse.com/security/cve/CVE-2015-1217/", }, { category: "self", summary: "SUSE CVE CVE-2015-1218 page", url: "https://www.suse.com/security/cve/CVE-2015-1218/", }, { category: "self", summary: "SUSE CVE CVE-2015-1219 page", url: "https://www.suse.com/security/cve/CVE-2015-1219/", }, { category: "self", summary: "SUSE CVE CVE-2015-1220 page", url: "https://www.suse.com/security/cve/CVE-2015-1220/", }, { category: "self", summary: "SUSE CVE CVE-2015-1221 page", url: "https://www.suse.com/security/cve/CVE-2015-1221/", }, { category: "self", summary: "SUSE CVE CVE-2015-1222 page", url: "https://www.suse.com/security/cve/CVE-2015-1222/", }, { category: "self", summary: "SUSE CVE CVE-2015-1223 page", url: "https://www.suse.com/security/cve/CVE-2015-1223/", }, { category: "self", summary: "SUSE CVE CVE-2015-1224 page", url: "https://www.suse.com/security/cve/CVE-2015-1224/", }, { category: "self", summary: "SUSE CVE CVE-2015-1225 page", url: "https://www.suse.com/security/cve/CVE-2015-1225/", }, { category: "self", summary: "SUSE CVE CVE-2015-1226 page", url: "https://www.suse.com/security/cve/CVE-2015-1226/", }, { category: "self", summary: "SUSE CVE CVE-2015-1227 page", url: "https://www.suse.com/security/cve/CVE-2015-1227/", }, { category: "self", summary: "SUSE CVE CVE-2015-1228 page", url: "https://www.suse.com/security/cve/CVE-2015-1228/", }, { category: "self", summary: "SUSE CVE CVE-2015-1229 page", url: "https://www.suse.com/security/cve/CVE-2015-1229/", }, { category: "self", summary: "SUSE CVE CVE-2015-1230 page", url: "https://www.suse.com/security/cve/CVE-2015-1230/", }, { category: "self", summary: "SUSE CVE CVE-2015-1231 page", url: "https://www.suse.com/security/cve/CVE-2015-1231/", }, { category: "self", summary: "SUSE CVE CVE-2015-1233 page", url: "https://www.suse.com/security/cve/CVE-2015-1233/", }, { category: "self", summary: "SUSE CVE CVE-2015-1234 page", url: "https://www.suse.com/security/cve/CVE-2015-1234/", }, { category: "self", summary: "SUSE CVE CVE-2015-1235 page", url: "https://www.suse.com/security/cve/CVE-2015-1235/", }, { category: "self", summary: "SUSE CVE CVE-2015-1236 page", url: "https://www.suse.com/security/cve/CVE-2015-1236/", }, { category: "self", summary: "SUSE CVE CVE-2015-1237 page", url: "https://www.suse.com/security/cve/CVE-2015-1237/", }, { category: "self", summary: "SUSE CVE CVE-2015-1238 page", url: "https://www.suse.com/security/cve/CVE-2015-1238/", }, { category: "self", summary: "SUSE CVE CVE-2015-1240 page", url: "https://www.suse.com/security/cve/CVE-2015-1240/", }, { category: "self", summary: "SUSE CVE CVE-2015-1241 page", url: "https://www.suse.com/security/cve/CVE-2015-1241/", }, { category: "self", summary: "SUSE CVE CVE-2015-1242 page", url: "https://www.suse.com/security/cve/CVE-2015-1242/", }, { category: "self", summary: "SUSE CVE CVE-2015-1243 page", url: "https://www.suse.com/security/cve/CVE-2015-1243/", }, { category: "self", summary: "SUSE CVE CVE-2015-1244 page", url: "https://www.suse.com/security/cve/CVE-2015-1244/", }, { category: "self", summary: "SUSE CVE CVE-2015-1245 page", url: "https://www.suse.com/security/cve/CVE-2015-1245/", }, { category: "self", summary: "SUSE CVE CVE-2015-1246 page", url: "https://www.suse.com/security/cve/CVE-2015-1246/", }, { category: "self", summary: "SUSE CVE CVE-2015-1247 page", url: "https://www.suse.com/security/cve/CVE-2015-1247/", }, { category: "self", summary: "SUSE CVE CVE-2015-1248 page", url: "https://www.suse.com/security/cve/CVE-2015-1248/", }, { category: "self", summary: "SUSE CVE CVE-2015-1249 page", url: "https://www.suse.com/security/cve/CVE-2015-1249/", }, { category: "self", summary: "SUSE CVE CVE-2015-1250 page", url: "https://www.suse.com/security/cve/CVE-2015-1250/", }, { category: "self", summary: "SUSE CVE CVE-2015-1251 page", url: "https://www.suse.com/security/cve/CVE-2015-1251/", }, { category: "self", summary: "SUSE CVE CVE-2015-1252 page", url: "https://www.suse.com/security/cve/CVE-2015-1252/", }, { category: "self", summary: "SUSE CVE CVE-2015-1253 page", url: "https://www.suse.com/security/cve/CVE-2015-1253/", }, { category: "self", summary: "SUSE CVE CVE-2015-1254 page", url: "https://www.suse.com/security/cve/CVE-2015-1254/", }, { category: "self", summary: "SUSE CVE CVE-2015-1255 page", url: "https://www.suse.com/security/cve/CVE-2015-1255/", }, { category: "self", summary: "SUSE CVE CVE-2015-1256 page", url: "https://www.suse.com/security/cve/CVE-2015-1256/", }, { category: "self", summary: "SUSE CVE CVE-2015-1257 page", url: "https://www.suse.com/security/cve/CVE-2015-1257/", }, { category: "self", summary: "SUSE CVE CVE-2015-1258 page", url: "https://www.suse.com/security/cve/CVE-2015-1258/", }, { category: "self", summary: "SUSE CVE CVE-2015-1259 page", url: "https://www.suse.com/security/cve/CVE-2015-1259/", }, { category: "self", summary: "SUSE CVE CVE-2015-1260 page", url: "https://www.suse.com/security/cve/CVE-2015-1260/", }, { category: "self", summary: "SUSE CVE CVE-2015-1261 page", url: "https://www.suse.com/security/cve/CVE-2015-1261/", }, { category: "self", summary: "SUSE CVE CVE-2015-1262 page", url: "https://www.suse.com/security/cve/CVE-2015-1262/", }, { category: "self", summary: "SUSE CVE CVE-2015-1263 page", url: "https://www.suse.com/security/cve/CVE-2015-1263/", }, { category: "self", summary: "SUSE CVE CVE-2015-1264 page", url: "https://www.suse.com/security/cve/CVE-2015-1264/", }, { category: "self", summary: "SUSE CVE CVE-2015-1265 page", url: "https://www.suse.com/security/cve/CVE-2015-1265/", }, { category: "self", summary: "SUSE CVE CVE-2015-1266 page", url: "https://www.suse.com/security/cve/CVE-2015-1266/", }, { category: "self", summary: "SUSE CVE CVE-2015-1267 page", url: "https://www.suse.com/security/cve/CVE-2015-1267/", }, { category: "self", summary: "SUSE CVE CVE-2015-1268 page", url: "https://www.suse.com/security/cve/CVE-2015-1268/", }, { category: "self", summary: "SUSE CVE CVE-2015-1269 page", url: "https://www.suse.com/security/cve/CVE-2015-1269/", }, { category: "self", summary: "SUSE CVE CVE-2015-1270 page", url: "https://www.suse.com/security/cve/CVE-2015-1270/", }, { category: "self", summary: "SUSE CVE CVE-2015-1271 page", url: "https://www.suse.com/security/cve/CVE-2015-1271/", }, { category: "self", summary: "SUSE CVE CVE-2015-1272 page", url: "https://www.suse.com/security/cve/CVE-2015-1272/", }, { category: "self", summary: "SUSE CVE CVE-2015-1273 page", url: "https://www.suse.com/security/cve/CVE-2015-1273/", }, { category: "self", summary: "SUSE CVE CVE-2015-1274 page", url: "https://www.suse.com/security/cve/CVE-2015-1274/", }, { category: "self", summary: "SUSE CVE CVE-2015-1275 page", url: "https://www.suse.com/security/cve/CVE-2015-1275/", }, { category: "self", summary: "SUSE CVE CVE-2015-1276 page", url: "https://www.suse.com/security/cve/CVE-2015-1276/", }, { category: "self", summary: "SUSE CVE CVE-2015-1277 page", url: "https://www.suse.com/security/cve/CVE-2015-1277/", }, { category: "self", summary: "SUSE CVE CVE-2015-1278 page", url: "https://www.suse.com/security/cve/CVE-2015-1278/", }, { category: "self", summary: "SUSE CVE CVE-2015-1279 page", url: "https://www.suse.com/security/cve/CVE-2015-1279/", }, { category: "self", summary: "SUSE CVE CVE-2015-1280 page", url: "https://www.suse.com/security/cve/CVE-2015-1280/", }, { category: "self", summary: "SUSE CVE CVE-2015-1281 page", url: "https://www.suse.com/security/cve/CVE-2015-1281/", }, { category: "self", summary: "SUSE CVE CVE-2015-1282 page", url: "https://www.suse.com/security/cve/CVE-2015-1282/", }, { category: "self", summary: "SUSE CVE CVE-2015-1283 page", url: "https://www.suse.com/security/cve/CVE-2015-1283/", }, { category: "self", summary: "SUSE CVE CVE-2015-1284 page", url: "https://www.suse.com/security/cve/CVE-2015-1284/", }, { category: "self", summary: "SUSE CVE CVE-2015-1285 page", url: "https://www.suse.com/security/cve/CVE-2015-1285/", }, { category: "self", summary: "SUSE CVE CVE-2015-1286 page", url: "https://www.suse.com/security/cve/CVE-2015-1286/", }, { category: "self", summary: "SUSE CVE CVE-2015-1287 page", url: "https://www.suse.com/security/cve/CVE-2015-1287/", }, { category: "self", summary: "SUSE CVE CVE-2015-1288 page", url: "https://www.suse.com/security/cve/CVE-2015-1288/", }, { category: "self", summary: "SUSE CVE CVE-2015-1289 page", url: "https://www.suse.com/security/cve/CVE-2015-1289/", }, { category: "self", summary: "SUSE CVE CVE-2015-1291 page", url: "https://www.suse.com/security/cve/CVE-2015-1291/", }, { category: "self", summary: "SUSE CVE CVE-2015-1292 page", url: "https://www.suse.com/security/cve/CVE-2015-1292/", }, { category: "self", summary: "SUSE CVE CVE-2015-1293 page", url: "https://www.suse.com/security/cve/CVE-2015-1293/", }, { category: "self", summary: "SUSE CVE CVE-2015-1294 page", url: "https://www.suse.com/security/cve/CVE-2015-1294/", }, { category: "self", summary: "SUSE CVE CVE-2015-1295 page", url: "https://www.suse.com/security/cve/CVE-2015-1295/", }, { category: "self", summary: "SUSE CVE CVE-2015-1296 page", url: "https://www.suse.com/security/cve/CVE-2015-1296/", }, { category: "self", summary: "SUSE CVE CVE-2015-1297 page", url: "https://www.suse.com/security/cve/CVE-2015-1297/", }, { category: "self", summary: "SUSE CVE CVE-2015-1298 page", url: "https://www.suse.com/security/cve/CVE-2015-1298/", }, { category: "self", summary: "SUSE CVE CVE-2015-1299 page", url: "https://www.suse.com/security/cve/CVE-2015-1299/", }, { category: "self", summary: "SUSE CVE CVE-2015-1300 page", url: "https://www.suse.com/security/cve/CVE-2015-1300/", }, { category: "self", summary: "SUSE CVE CVE-2015-1301 page", url: "https://www.suse.com/security/cve/CVE-2015-1301/", }, { category: "self", summary: "SUSE CVE CVE-2015-1302 page", url: "https://www.suse.com/security/cve/CVE-2015-1302/", }, { category: "self", summary: "SUSE CVE CVE-2015-1303 page", url: "https://www.suse.com/security/cve/CVE-2015-1303/", }, { category: "self", summary: "SUSE CVE CVE-2015-1304 page", url: "https://www.suse.com/security/cve/CVE-2015-1304/", }, { category: "self", summary: "SUSE CVE CVE-2015-6755 page", url: "https://www.suse.com/security/cve/CVE-2015-6755/", }, { category: "self", summary: "SUSE CVE CVE-2015-6756 page", url: "https://www.suse.com/security/cve/CVE-2015-6756/", }, { category: "self", summary: "SUSE CVE CVE-2015-6757 page", url: "https://www.suse.com/security/cve/CVE-2015-6757/", }, { category: "self", summary: "SUSE CVE CVE-2015-6758 page", url: "https://www.suse.com/security/cve/CVE-2015-6758/", }, { category: "self", summary: "SUSE CVE CVE-2015-6759 page", url: "https://www.suse.com/security/cve/CVE-2015-6759/", }, { category: "self", summary: "SUSE CVE CVE-2015-6760 page", url: "https://www.suse.com/security/cve/CVE-2015-6760/", }, { category: "self", summary: "SUSE CVE CVE-2015-6761 page", url: "https://www.suse.com/security/cve/CVE-2015-6761/", }, { category: "self", summary: "SUSE CVE CVE-2015-6762 page", url: "https://www.suse.com/security/cve/CVE-2015-6762/", }, { category: "self", summary: "SUSE CVE CVE-2015-6763 page", url: "https://www.suse.com/security/cve/CVE-2015-6763/", }, { category: "self", summary: "SUSE CVE CVE-2015-6764 page", url: "https://www.suse.com/security/cve/CVE-2015-6764/", }, { category: "self", summary: "SUSE CVE CVE-2015-6765 page", url: "https://www.suse.com/security/cve/CVE-2015-6765/", }, { category: "self", summary: "SUSE CVE CVE-2015-6766 page", url: "https://www.suse.com/security/cve/CVE-2015-6766/", }, { category: "self", summary: "SUSE CVE CVE-2015-6767 page", url: "https://www.suse.com/security/cve/CVE-2015-6767/", }, { category: "self", summary: "SUSE CVE CVE-2015-6768 page", url: "https://www.suse.com/security/cve/CVE-2015-6768/", }, { category: "self", summary: "SUSE CVE CVE-2015-6769 page", url: "https://www.suse.com/security/cve/CVE-2015-6769/", }, { category: "self", summary: "SUSE CVE CVE-2015-6770 page", url: "https://www.suse.com/security/cve/CVE-2015-6770/", }, { category: "self", summary: "SUSE CVE CVE-2015-6771 page", url: "https://www.suse.com/security/cve/CVE-2015-6771/", }, { category: "self", summary: "SUSE CVE CVE-2015-6772 page", url: "https://www.suse.com/security/cve/CVE-2015-6772/", }, { category: "self", summary: "SUSE CVE CVE-2015-6773 page", url: "https://www.suse.com/security/cve/CVE-2015-6773/", }, { category: "self", summary: "SUSE CVE CVE-2015-6774 page", url: "https://www.suse.com/security/cve/CVE-2015-6774/", }, { category: "self", summary: "SUSE CVE CVE-2015-6775 page", url: "https://www.suse.com/security/cve/CVE-2015-6775/", }, { category: "self", summary: "SUSE CVE CVE-2015-6776 page", url: "https://www.suse.com/security/cve/CVE-2015-6776/", }, { category: "self", summary: "SUSE CVE CVE-2015-6777 page", url: "https://www.suse.com/security/cve/CVE-2015-6777/", }, { category: "self", summary: "SUSE CVE CVE-2015-6778 page", url: "https://www.suse.com/security/cve/CVE-2015-6778/", }, { category: "self", summary: "SUSE CVE CVE-2015-6779 page", url: "https://www.suse.com/security/cve/CVE-2015-6779/", }, { category: "self", summary: "SUSE CVE CVE-2015-6780 page", url: "https://www.suse.com/security/cve/CVE-2015-6780/", }, { category: "self", summary: "SUSE CVE CVE-2015-6781 page", url: "https://www.suse.com/security/cve/CVE-2015-6781/", }, { category: "self", summary: "SUSE CVE CVE-2015-6782 page", url: "https://www.suse.com/security/cve/CVE-2015-6782/", }, { category: "self", summary: "SUSE CVE CVE-2015-6783 page", url: "https://www.suse.com/security/cve/CVE-2015-6783/", }, { category: "self", summary: "SUSE CVE CVE-2015-6784 page", url: "https://www.suse.com/security/cve/CVE-2015-6784/", }, { category: "self", summary: "SUSE CVE CVE-2015-6785 page", url: "https://www.suse.com/security/cve/CVE-2015-6785/", }, { category: "self", summary: "SUSE CVE CVE-2015-6786 page", url: "https://www.suse.com/security/cve/CVE-2015-6786/", }, { category: "self", summary: "SUSE CVE CVE-2015-6787 page", url: "https://www.suse.com/security/cve/CVE-2015-6787/", }, { category: "self", summary: "SUSE CVE CVE-2015-6788 page", url: "https://www.suse.com/security/cve/CVE-2015-6788/", }, { category: "self", summary: "SUSE CVE CVE-2015-6789 page", url: "https://www.suse.com/security/cve/CVE-2015-6789/", }, { category: "self", summary: "SUSE CVE CVE-2015-6790 page", url: "https://www.suse.com/security/cve/CVE-2015-6790/", }, { category: "self", summary: "SUSE CVE CVE-2015-6791 page", url: "https://www.suse.com/security/cve/CVE-2015-6791/", }, { category: "self", summary: "SUSE CVE CVE-2015-6792 page", url: "https://www.suse.com/security/cve/CVE-2015-6792/", }, { category: "self", summary: "SUSE CVE CVE-2015-7834 page", url: "https://www.suse.com/security/cve/CVE-2015-7834/", }, { category: "self", summary: "SUSE CVE CVE-2015-8126 page", url: "https://www.suse.com/security/cve/CVE-2015-8126/", }, { category: "self", summary: "SUSE CVE CVE-2016-1612 page", url: "https://www.suse.com/security/cve/CVE-2016-1612/", }, { category: "self", summary: "SUSE CVE CVE-2016-1613 page", url: "https://www.suse.com/security/cve/CVE-2016-1613/", }, { category: "self", summary: "SUSE CVE CVE-2016-1614 page", url: "https://www.suse.com/security/cve/CVE-2016-1614/", }, { category: "self", summary: "SUSE CVE CVE-2016-1615 page", url: "https://www.suse.com/security/cve/CVE-2016-1615/", }, { category: "self", summary: "SUSE CVE CVE-2016-1616 page", url: "https://www.suse.com/security/cve/CVE-2016-1616/", }, { category: "self", summary: "SUSE CVE CVE-2016-1617 page", url: "https://www.suse.com/security/cve/CVE-2016-1617/", }, { category: "self", summary: "SUSE CVE CVE-2016-1618 page", url: "https://www.suse.com/security/cve/CVE-2016-1618/", }, { category: "self", summary: "SUSE CVE CVE-2016-1619 page", url: "https://www.suse.com/security/cve/CVE-2016-1619/", }, { category: "self", summary: "SUSE CVE CVE-2016-1620 page", url: "https://www.suse.com/security/cve/CVE-2016-1620/", }, { category: "self", summary: "SUSE CVE CVE-2016-1622 page", url: "https://www.suse.com/security/cve/CVE-2016-1622/", }, { category: "self", summary: "SUSE CVE CVE-2016-1623 page", url: "https://www.suse.com/security/cve/CVE-2016-1623/", }, { category: "self", summary: "SUSE CVE CVE-2016-1624 page", url: "https://www.suse.com/security/cve/CVE-2016-1624/", }, { category: "self", summary: "SUSE CVE CVE-2016-1625 page", url: "https://www.suse.com/security/cve/CVE-2016-1625/", }, { category: "self", summary: "SUSE CVE CVE-2016-1626 page", url: "https://www.suse.com/security/cve/CVE-2016-1626/", }, { category: "self", summary: "SUSE CVE CVE-2016-1627 page", url: "https://www.suse.com/security/cve/CVE-2016-1627/", }, { category: "self", summary: "SUSE CVE CVE-2016-1629 page", url: "https://www.suse.com/security/cve/CVE-2016-1629/", }, { category: "self", summary: "SUSE CVE CVE-2016-1630 page", url: "https://www.suse.com/security/cve/CVE-2016-1630/", }, { category: "self", summary: "SUSE CVE CVE-2016-1631 page", url: "https://www.suse.com/security/cve/CVE-2016-1631/", }, { category: "self", summary: "SUSE CVE CVE-2016-1632 page", url: "https://www.suse.com/security/cve/CVE-2016-1632/", }, { category: "self", summary: "SUSE CVE CVE-2016-1633 page", url: "https://www.suse.com/security/cve/CVE-2016-1633/", }, { category: "self", summary: "SUSE CVE CVE-2016-1634 page", url: "https://www.suse.com/security/cve/CVE-2016-1634/", }, { category: "self", summary: "SUSE CVE CVE-2016-1635 page", url: "https://www.suse.com/security/cve/CVE-2016-1635/", }, { category: "self", summary: "SUSE CVE CVE-2016-1636 page", url: "https://www.suse.com/security/cve/CVE-2016-1636/", }, { category: "self", summary: "SUSE CVE CVE-2016-1637 page", url: "https://www.suse.com/security/cve/CVE-2016-1637/", }, { category: "self", summary: "SUSE CVE CVE-2016-1638 page", url: "https://www.suse.com/security/cve/CVE-2016-1638/", }, { category: "self", summary: "SUSE CVE CVE-2016-1639 page", url: "https://www.suse.com/security/cve/CVE-2016-1639/", }, { category: "self", summary: "SUSE CVE CVE-2016-1640 page", url: "https://www.suse.com/security/cve/CVE-2016-1640/", }, { category: "self", summary: "SUSE CVE CVE-2016-1641 page", url: "https://www.suse.com/security/cve/CVE-2016-1641/", }, { category: "self", summary: "SUSE CVE CVE-2016-1642 page", url: "https://www.suse.com/security/cve/CVE-2016-1642/", }, { category: "self", summary: "SUSE CVE CVE-2016-1643 page", url: "https://www.suse.com/security/cve/CVE-2016-1643/", }, { category: "self", summary: "SUSE CVE CVE-2016-1644 page", url: "https://www.suse.com/security/cve/CVE-2016-1644/", }, { category: "self", summary: "SUSE CVE CVE-2016-1645 page", url: "https://www.suse.com/security/cve/CVE-2016-1645/", }, { category: "self", summary: "SUSE CVE CVE-2016-1646 page", url: "https://www.suse.com/security/cve/CVE-2016-1646/", }, { category: "self", summary: "SUSE CVE CVE-2016-1647 page", url: "https://www.suse.com/security/cve/CVE-2016-1647/", }, { category: "self", summary: "SUSE CVE CVE-2016-1648 page", url: "https://www.suse.com/security/cve/CVE-2016-1648/", }, { category: "self", summary: "SUSE CVE CVE-2016-1649 page", url: "https://www.suse.com/security/cve/CVE-2016-1649/", }, { category: "self", summary: "SUSE CVE CVE-2016-1650 page", url: "https://www.suse.com/security/cve/CVE-2016-1650/", }, { category: "self", summary: "SUSE CVE CVE-2016-1651 page", url: "https://www.suse.com/security/cve/CVE-2016-1651/", }, { category: "self", summary: "SUSE CVE CVE-2016-1652 page", url: "https://www.suse.com/security/cve/CVE-2016-1652/", }, { category: "self", summary: "SUSE CVE CVE-2016-1653 page", url: "https://www.suse.com/security/cve/CVE-2016-1653/", }, { category: "self", summary: "SUSE CVE CVE-2016-1654 page", url: "https://www.suse.com/security/cve/CVE-2016-1654/", }, { category: "self", summary: "SUSE CVE CVE-2016-1655 page", url: "https://www.suse.com/security/cve/CVE-2016-1655/", }, { category: "self", summary: "SUSE CVE CVE-2016-1656 page", url: "https://www.suse.com/security/cve/CVE-2016-1656/", }, { category: "self", summary: "SUSE CVE CVE-2016-1657 page", url: "https://www.suse.com/security/cve/CVE-2016-1657/", }, { category: "self", summary: "SUSE CVE CVE-2016-1658 page", url: "https://www.suse.com/security/cve/CVE-2016-1658/", }, { category: "self", summary: "SUSE CVE CVE-2016-1659 page", url: "https://www.suse.com/security/cve/CVE-2016-1659/", }, { category: "self", summary: "SUSE CVE CVE-2016-1660 page", url: "https://www.suse.com/security/cve/CVE-2016-1660/", }, { category: "self", summary: "SUSE CVE CVE-2016-1661 page", url: "https://www.suse.com/security/cve/CVE-2016-1661/", }, { category: "self", summary: "SUSE CVE CVE-2016-1662 page", url: "https://www.suse.com/security/cve/CVE-2016-1662/", }, { category: "self", summary: "SUSE CVE CVE-2016-1663 page", url: "https://www.suse.com/security/cve/CVE-2016-1663/", }, { category: "self", summary: "SUSE CVE CVE-2016-1664 page", url: "https://www.suse.com/security/cve/CVE-2016-1664/", }, { category: "self", summary: "SUSE CVE CVE-2016-1665 page", url: "https://www.suse.com/security/cve/CVE-2016-1665/", }, { category: "self", summary: "SUSE CVE CVE-2016-1666 page", url: "https://www.suse.com/security/cve/CVE-2016-1666/", }, { category: "self", summary: "SUSE CVE CVE-2016-1667 page", url: "https://www.suse.com/security/cve/CVE-2016-1667/", }, { category: "self", summary: "SUSE CVE CVE-2016-1668 page", url: "https://www.suse.com/security/cve/CVE-2016-1668/", }, { category: "self", summary: "SUSE CVE CVE-2016-1669 page", url: "https://www.suse.com/security/cve/CVE-2016-1669/", }, { category: "self", summary: "SUSE CVE CVE-2016-1670 page", url: "https://www.suse.com/security/cve/CVE-2016-1670/", }, { category: "self", summary: "SUSE CVE CVE-2016-1672 page", url: "https://www.suse.com/security/cve/CVE-2016-1672/", }, { category: "self", summary: "SUSE CVE CVE-2016-1673 page", url: "https://www.suse.com/security/cve/CVE-2016-1673/", }, { category: "self", summary: "SUSE CVE CVE-2016-1674 page", url: "https://www.suse.com/security/cve/CVE-2016-1674/", }, { category: "self", summary: "SUSE CVE CVE-2016-1675 page", url: "https://www.suse.com/security/cve/CVE-2016-1675/", }, { category: "self", summary: "SUSE CVE CVE-2016-1676 page", url: "https://www.suse.com/security/cve/CVE-2016-1676/", }, { category: "self", summary: "SUSE CVE CVE-2016-1677 page", url: "https://www.suse.com/security/cve/CVE-2016-1677/", }, { category: "self", summary: "SUSE CVE CVE-2016-1678 page", url: "https://www.suse.com/security/cve/CVE-2016-1678/", }, { category: "self", summary: "SUSE CVE CVE-2016-1679 page", url: "https://www.suse.com/security/cve/CVE-2016-1679/", }, { category: "self", summary: "SUSE CVE CVE-2016-1680 page", url: "https://www.suse.com/security/cve/CVE-2016-1680/", }, { category: "self", summary: "SUSE CVE CVE-2016-1681 page", url: "https://www.suse.com/security/cve/CVE-2016-1681/", }, { category: "self", summary: "SUSE CVE CVE-2016-1682 page", url: "https://www.suse.com/security/cve/CVE-2016-1682/", }, { category: "self", summary: "SUSE CVE CVE-2016-1683 page", url: "https://www.suse.com/security/cve/CVE-2016-1683/", }, { category: "self", summary: "SUSE CVE CVE-2016-1684 page", url: "https://www.suse.com/security/cve/CVE-2016-1684/", }, { category: "self", summary: "SUSE CVE CVE-2016-1685 page", url: "https://www.suse.com/security/cve/CVE-2016-1685/", }, { category: "self", summary: "SUSE CVE CVE-2016-1686 page", url: "https://www.suse.com/security/cve/CVE-2016-1686/", }, { category: "self", summary: "SUSE CVE CVE-2016-1687 page", url: "https://www.suse.com/security/cve/CVE-2016-1687/", }, { category: "self", summary: "SUSE CVE CVE-2016-1688 page", url: "https://www.suse.com/security/cve/CVE-2016-1688/", }, { category: "self", summary: "SUSE CVE CVE-2016-1689 page", url: "https://www.suse.com/security/cve/CVE-2016-1689/", }, { category: "self", summary: "SUSE CVE CVE-2016-1690 page", url: "https://www.suse.com/security/cve/CVE-2016-1690/", }, { category: "self", summary: "SUSE CVE CVE-2016-1691 page", url: "https://www.suse.com/security/cve/CVE-2016-1691/", }, { category: "self", summary: "SUSE CVE CVE-2016-1692 page", url: "https://www.suse.com/security/cve/CVE-2016-1692/", }, { category: "self", summary: "SUSE CVE CVE-2016-1693 page", url: "https://www.suse.com/security/cve/CVE-2016-1693/", }, { category: "self", summary: "SUSE CVE CVE-2016-1694 page", url: "https://www.suse.com/security/cve/CVE-2016-1694/", }, { category: "self", summary: "SUSE CVE CVE-2016-1695 page", url: "https://www.suse.com/security/cve/CVE-2016-1695/", }, { category: "self", summary: "SUSE CVE CVE-2016-1696 page", url: "https://www.suse.com/security/cve/CVE-2016-1696/", }, { category: "self", summary: "SUSE CVE CVE-2016-1697 page", url: "https://www.suse.com/security/cve/CVE-2016-1697/", }, { category: "self", summary: "SUSE CVE CVE-2016-1698 page", url: "https://www.suse.com/security/cve/CVE-2016-1698/", }, { category: "self", summary: "SUSE CVE CVE-2016-1699 page", url: "https://www.suse.com/security/cve/CVE-2016-1699/", }, { category: "self", summary: "SUSE CVE CVE-2016-1700 page", url: "https://www.suse.com/security/cve/CVE-2016-1700/", }, { category: "self", summary: "SUSE CVE CVE-2016-1701 page", url: "https://www.suse.com/security/cve/CVE-2016-1701/", }, { category: "self", summary: "SUSE CVE CVE-2016-1702 page", url: "https://www.suse.com/security/cve/CVE-2016-1702/", }, { category: "self", summary: "SUSE CVE CVE-2016-1703 page", url: "https://www.suse.com/security/cve/CVE-2016-1703/", }, { category: "self", summary: "SUSE CVE CVE-2016-1704 page", url: "https://www.suse.com/security/cve/CVE-2016-1704/", }, { category: "self", summary: "SUSE CVE CVE-2016-1705 page", url: "https://www.suse.com/security/cve/CVE-2016-1705/", }, { category: "self", summary: "SUSE CVE CVE-2016-1706 page", url: "https://www.suse.com/security/cve/CVE-2016-1706/", }, { category: "self", summary: "SUSE CVE CVE-2016-1707 page", url: "https://www.suse.com/security/cve/CVE-2016-1707/", }, { category: "self", summary: "SUSE CVE CVE-2016-1708 page", url: "https://www.suse.com/security/cve/CVE-2016-1708/", }, { category: "self", summary: "SUSE CVE CVE-2016-1709 page", url: "https://www.suse.com/security/cve/CVE-2016-1709/", }, { category: "self", summary: "SUSE CVE CVE-2016-1710 page", url: "https://www.suse.com/security/cve/CVE-2016-1710/", }, { category: "self", summary: "SUSE CVE CVE-2016-1711 page", url: "https://www.suse.com/security/cve/CVE-2016-1711/", }, { category: "self", summary: "SUSE CVE CVE-2016-3679 page", url: "https://www.suse.com/security/cve/CVE-2016-3679/", }, { category: "self", summary: "SUSE CVE CVE-2016-5127 page", url: "https://www.suse.com/security/cve/CVE-2016-5127/", }, { category: "self", summary: "SUSE CVE CVE-2016-5128 page", url: "https://www.suse.com/security/cve/CVE-2016-5128/", }, { category: "self", summary: "SUSE CVE CVE-2016-5129 page", url: "https://www.suse.com/security/cve/CVE-2016-5129/", }, { category: "self", summary: "SUSE CVE CVE-2016-5130 page", url: "https://www.suse.com/security/cve/CVE-2016-5130/", }, { category: "self", summary: "SUSE CVE CVE-2016-5131 page", url: "https://www.suse.com/security/cve/CVE-2016-5131/", }, { category: "self", summary: "SUSE CVE CVE-2016-5132 page", url: "https://www.suse.com/security/cve/CVE-2016-5132/", }, { category: "self", summary: "SUSE CVE CVE-2016-5133 page", url: "https://www.suse.com/security/cve/CVE-2016-5133/", }, { category: "self", summary: "SUSE CVE CVE-2016-5134 page", url: "https://www.suse.com/security/cve/CVE-2016-5134/", }, { category: "self", summary: "SUSE CVE CVE-2016-5135 page", url: "https://www.suse.com/security/cve/CVE-2016-5135/", }, { category: "self", summary: "SUSE CVE CVE-2016-5136 page", url: "https://www.suse.com/security/cve/CVE-2016-5136/", }, { category: "self", summary: "SUSE CVE CVE-2016-5137 page", url: "https://www.suse.com/security/cve/CVE-2016-5137/", }, { category: "self", summary: "SUSE CVE CVE-2016-5139 page", url: "https://www.suse.com/security/cve/CVE-2016-5139/", }, { category: "self", summary: "SUSE CVE CVE-2016-5140 page", url: "https://www.suse.com/security/cve/CVE-2016-5140/", }, { category: "self", summary: "SUSE CVE CVE-2016-5141 page", url: "https://www.suse.com/security/cve/CVE-2016-5141/", }, { category: "self", summary: "SUSE CVE CVE-2016-5142 page", url: "https://www.suse.com/security/cve/CVE-2016-5142/", }, { category: "self", summary: "SUSE CVE CVE-2016-5143 page", url: "https://www.suse.com/security/cve/CVE-2016-5143/", }, { category: "self", summary: "SUSE CVE CVE-2016-5144 page", url: "https://www.suse.com/security/cve/CVE-2016-5144/", }, { category: "self", summary: "SUSE CVE CVE-2016-5145 page", url: "https://www.suse.com/security/cve/CVE-2016-5145/", }, { category: "self", summary: "SUSE CVE CVE-2016-5146 page", url: "https://www.suse.com/security/cve/CVE-2016-5146/", }, { category: "self", summary: "SUSE CVE CVE-2016-5147 page", url: "https://www.suse.com/security/cve/CVE-2016-5147/", }, { category: "self", summary: "SUSE CVE CVE-2016-5148 page", url: "https://www.suse.com/security/cve/CVE-2016-5148/", }, { category: "self", summary: "SUSE CVE CVE-2016-5149 page", url: "https://www.suse.com/security/cve/CVE-2016-5149/", }, { category: "self", summary: "SUSE CVE CVE-2016-5150 page", url: "https://www.suse.com/security/cve/CVE-2016-5150/", }, { category: "self", summary: "SUSE CVE CVE-2016-5151 page", url: "https://www.suse.com/security/cve/CVE-2016-5151/", }, { category: "self", summary: "SUSE CVE CVE-2016-5152 page", url: "https://www.suse.com/security/cve/CVE-2016-5152/", }, { category: "self", summary: "SUSE CVE CVE-2016-5153 page", url: "https://www.suse.com/security/cve/CVE-2016-5153/", }, { category: "self", summary: "SUSE CVE CVE-2016-5154 page", url: "https://www.suse.com/security/cve/CVE-2016-5154/", }, { category: "self", summary: "SUSE CVE CVE-2016-5155 page", url: "https://www.suse.com/security/cve/CVE-2016-5155/", }, { category: "self", summary: "SUSE CVE CVE-2016-5156 page", url: "https://www.suse.com/security/cve/CVE-2016-5156/", }, { category: "self", summary: "SUSE CVE CVE-2016-5157 page", url: "https://www.suse.com/security/cve/CVE-2016-5157/", }, { category: "self", summary: "SUSE CVE CVE-2016-5158 page", url: "https://www.suse.com/security/cve/CVE-2016-5158/", }, { category: "self", summary: "SUSE CVE CVE-2016-5159 page", url: "https://www.suse.com/security/cve/CVE-2016-5159/", }, { category: "self", summary: "SUSE CVE CVE-2016-5160 page", url: "https://www.suse.com/security/cve/CVE-2016-5160/", }, { category: "self", summary: "SUSE CVE CVE-2016-5161 page", url: "https://www.suse.com/security/cve/CVE-2016-5161/", }, { category: "self", summary: "SUSE CVE CVE-2016-5162 page", url: "https://www.suse.com/security/cve/CVE-2016-5162/", }, { category: "self", summary: "SUSE CVE CVE-2016-5163 page", url: "https://www.suse.com/security/cve/CVE-2016-5163/", }, { category: "self", summary: "SUSE CVE CVE-2016-5164 page", url: "https://www.suse.com/security/cve/CVE-2016-5164/", }, { category: "self", summary: "SUSE CVE CVE-2016-5165 page", url: "https://www.suse.com/security/cve/CVE-2016-5165/", }, { category: "self", summary: "SUSE CVE CVE-2016-5166 page", url: "https://www.suse.com/security/cve/CVE-2016-5166/", }, { category: "self", summary: "SUSE CVE CVE-2016-5170 page", url: "https://www.suse.com/security/cve/CVE-2016-5170/", }, { category: "self", summary: "SUSE CVE CVE-2016-5171 page", url: "https://www.suse.com/security/cve/CVE-2016-5171/", }, { category: "self", summary: "SUSE CVE CVE-2016-5172 page", url: "https://www.suse.com/security/cve/CVE-2016-5172/", }, { category: "self", summary: "SUSE CVE CVE-2016-5173 page", url: "https://www.suse.com/security/cve/CVE-2016-5173/", }, { category: "self", summary: "SUSE CVE CVE-2016-5174 page", url: "https://www.suse.com/security/cve/CVE-2016-5174/", }, { category: "self", summary: "SUSE CVE CVE-2016-5175 page", url: "https://www.suse.com/security/cve/CVE-2016-5175/", }, { category: "self", summary: "SUSE CVE CVE-2016-5177 page", url: "https://www.suse.com/security/cve/CVE-2016-5177/", }, { category: "self", summary: "SUSE CVE CVE-2016-5178 page", url: "https://www.suse.com/security/cve/CVE-2016-5178/", }, { category: "self", summary: "SUSE CVE CVE-2016-5181 page", url: "https://www.suse.com/security/cve/CVE-2016-5181/", }, { category: "self", summary: "SUSE CVE CVE-2016-5182 page", url: "https://www.suse.com/security/cve/CVE-2016-5182/", }, { category: "self", summary: "SUSE CVE CVE-2016-5183 page", url: "https://www.suse.com/security/cve/CVE-2016-5183/", }, { category: "self", summary: "SUSE CVE CVE-2016-5184 page", url: "https://www.suse.com/security/cve/CVE-2016-5184/", }, { category: "self", summary: "SUSE CVE CVE-2016-5185 page", url: "https://www.suse.com/security/cve/CVE-2016-5185/", }, { category: "self", summary: "SUSE CVE CVE-2016-5186 page", url: "https://www.suse.com/security/cve/CVE-2016-5186/", }, { category: "self", summary: "SUSE CVE CVE-2016-5187 page", url: "https://www.suse.com/security/cve/CVE-2016-5187/", }, { category: "self", summary: "SUSE CVE CVE-2016-5188 page", url: "https://www.suse.com/security/cve/CVE-2016-5188/", }, { category: "self", summary: "SUSE CVE CVE-2016-5189 page", url: "https://www.suse.com/security/cve/CVE-2016-5189/", }, { category: "self", summary: "SUSE CVE CVE-2016-5190 page", url: "https://www.suse.com/security/cve/CVE-2016-5190/", }, { category: "self", summary: "SUSE CVE CVE-2016-5191 page", url: "https://www.suse.com/security/cve/CVE-2016-5191/", }, { category: "self", summary: "SUSE CVE CVE-2016-5192 page", url: "https://www.suse.com/security/cve/CVE-2016-5192/", }, { category: "self", summary: "SUSE CVE CVE-2016-5193 page", url: "https://www.suse.com/security/cve/CVE-2016-5193/", }, { category: "self", summary: "SUSE CVE CVE-2016-5198 page", url: "https://www.suse.com/security/cve/CVE-2016-5198/", }, { category: "self", summary: "SUSE CVE CVE-2016-5199 page", url: "https://www.suse.com/security/cve/CVE-2016-5199/", }, { category: "self", summary: "SUSE CVE CVE-2016-5200 page", url: "https://www.suse.com/security/cve/CVE-2016-5200/", }, { category: "self", summary: "SUSE CVE CVE-2016-5201 page", url: "https://www.suse.com/security/cve/CVE-2016-5201/", }, { category: "self", summary: "SUSE CVE CVE-2016-5202 page", url: "https://www.suse.com/security/cve/CVE-2016-5202/", }, { category: "self", summary: "SUSE CVE CVE-2016-5203 page", url: "https://www.suse.com/security/cve/CVE-2016-5203/", }, { category: "self", summary: "SUSE CVE CVE-2016-5204 page", url: "https://www.suse.com/security/cve/CVE-2016-5204/", }, { category: "self", summary: "SUSE CVE CVE-2016-5205 page", url: "https://www.suse.com/security/cve/CVE-2016-5205/", }, { category: "self", summary: "SUSE CVE CVE-2016-5206 page", url: "https://www.suse.com/security/cve/CVE-2016-5206/", }, { category: "self", summary: "SUSE CVE CVE-2016-5207 page", url: "https://www.suse.com/security/cve/CVE-2016-5207/", }, { category: "self", summary: "SUSE CVE CVE-2016-5208 page", url: "https://www.suse.com/security/cve/CVE-2016-5208/", }, { category: "self", summary: "SUSE CVE CVE-2016-5209 page", url: "https://www.suse.com/security/cve/CVE-2016-5209/", }, { category: "self", summary: "SUSE CVE CVE-2016-5210 page", url: "https://www.suse.com/security/cve/CVE-2016-5210/", }, { category: "self", summary: "SUSE CVE CVE-2016-5211 page", url: "https://www.suse.com/security/cve/CVE-2016-5211/", }, { category: "self", summary: "SUSE CVE CVE-2016-5212 page", url: "https://www.suse.com/security/cve/CVE-2016-5212/", }, { category: "self", summary: "SUSE CVE CVE-2016-5213 page", url: "https://www.suse.com/security/cve/CVE-2016-5213/", }, { category: "self", summary: "SUSE CVE CVE-2016-5214 page", url: "https://www.suse.com/security/cve/CVE-2016-5214/", }, { category: "self", summary: "SUSE CVE CVE-2016-5215 page", url: "https://www.suse.com/security/cve/CVE-2016-5215/", }, { category: "self", summary: "SUSE CVE CVE-2016-5216 page", url: "https://www.suse.com/security/cve/CVE-2016-5216/", }, { category: "self", summary: "SUSE CVE CVE-2016-5217 page", url: "https://www.suse.com/security/cve/CVE-2016-5217/", }, { category: "self", summary: "SUSE CVE CVE-2016-5218 page", url: "https://www.suse.com/security/cve/CVE-2016-5218/", }, { category: "self", summary: "SUSE CVE CVE-2016-5219 page", url: "https://www.suse.com/security/cve/CVE-2016-5219/", }, { category: "self", summary: "SUSE CVE CVE-2016-5220 page", url: "https://www.suse.com/security/cve/CVE-2016-5220/", }, { category: "self", summary: "SUSE CVE CVE-2016-5221 page", url: "https://www.suse.com/security/cve/CVE-2016-5221/", }, { category: "self", summary: "SUSE CVE CVE-2016-5222 page", url: "https://www.suse.com/security/cve/CVE-2016-5222/", }, { category: "self", summary: "SUSE CVE CVE-2016-5223 page", url: "https://www.suse.com/security/cve/CVE-2016-5223/", }, { category: "self", summary: "SUSE CVE CVE-2016-5224 page", url: "https://www.suse.com/security/cve/CVE-2016-5224/", }, { category: "self", summary: "SUSE CVE CVE-2016-5225 page", url: "https://www.suse.com/security/cve/CVE-2016-5225/", }, { category: "self", summary: "SUSE CVE CVE-2016-5226 page", url: "https://www.suse.com/security/cve/CVE-2016-5226/", }, { category: "self", summary: "SUSE CVE CVE-2016-9650 page", url: "https://www.suse.com/security/cve/CVE-2016-9650/", }, { category: "self", summary: "SUSE CVE CVE-2016-9651 page", url: "https://www.suse.com/security/cve/CVE-2016-9651/", }, { category: "self", summary: "SUSE CVE CVE-2016-9652 page", url: "https://www.suse.com/security/cve/CVE-2016-9652/", }, ], title: "chromedriver-55.0.2883.75-3.1 on GA media", tracking: { current_release_date: "2024-06-15T00:00:00Z", generator: { date: "2024-06-15T00:00:00Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "openSUSE-SU-2024:10171-1", initial_release_date: "2024-06-15T00:00:00Z", revision_history: [ { date: "2024-06-15T00:00:00Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "chromedriver-55.0.2883.75-3.1.aarch64", product: { name: "chromedriver-55.0.2883.75-3.1.aarch64", product_id: "chromedriver-55.0.2883.75-3.1.aarch64", }, }, { category: "product_version", name: "chromium-55.0.2883.75-3.1.aarch64", product: { name: "chromium-55.0.2883.75-3.1.aarch64", product_id: "chromium-55.0.2883.75-3.1.aarch64", }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "chromedriver-55.0.2883.75-3.1.ppc64le", product: { name: "chromedriver-55.0.2883.75-3.1.ppc64le", product_id: "chromedriver-55.0.2883.75-3.1.ppc64le", }, }, { category: "product_version", name: "chromium-55.0.2883.75-3.1.ppc64le", product: { name: "chromium-55.0.2883.75-3.1.ppc64le", product_id: "chromium-55.0.2883.75-3.1.ppc64le", }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "chromedriver-55.0.2883.75-3.1.s390x", product: { name: "chromedriver-55.0.2883.75-3.1.s390x", product_id: "chromedriver-55.0.2883.75-3.1.s390x", }, }, { category: "product_version", name: "chromium-55.0.2883.75-3.1.s390x", product: { name: "chromium-55.0.2883.75-3.1.s390x", product_id: "chromium-55.0.2883.75-3.1.s390x", }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "chromedriver-55.0.2883.75-3.1.x86_64", product: { name: "chromedriver-55.0.2883.75-3.1.x86_64", product_id: "chromedriver-55.0.2883.75-3.1.x86_64", }, }, { category: "product_version", name: "chromium-55.0.2883.75-3.1.x86_64", product: { name: "chromium-55.0.2883.75-3.1.x86_64", product_id: "chromium-55.0.2883.75-3.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "openSUSE Tumbleweed", product: { name: "openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed", product_identification_helper: { cpe: "cpe:/o:opensuse:tumbleweed", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "chromedriver-55.0.2883.75-3.1.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", }, product_reference: "chromedriver-55.0.2883.75-3.1.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "chromedriver-55.0.2883.75-3.1.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", }, product_reference: "chromedriver-55.0.2883.75-3.1.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "chromedriver-55.0.2883.75-3.1.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", }, product_reference: "chromedriver-55.0.2883.75-3.1.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "chromedriver-55.0.2883.75-3.1.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", }, product_reference: "chromedriver-55.0.2883.75-3.1.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "chromium-55.0.2883.75-3.1.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", }, product_reference: "chromium-55.0.2883.75-3.1.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "chromium-55.0.2883.75-3.1.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", }, product_reference: "chromium-55.0.2883.75-3.1.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "chromium-55.0.2883.75-3.1.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", }, product_reference: "chromium-55.0.2883.75-3.1.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "chromium-55.0.2883.75-3.1.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", }, product_reference: "chromium-55.0.2883.75-3.1.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, ], }, vulnerabilities: [ { cve: "CVE-2011-3015", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3015", }, ], notes: [ { category: "general", text: "Multiple integer overflows in the PDF codecs in Google Chrome before 17.0.963.56 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3015", url: "https://www.suse.com/security/cve/CVE-2011-3015", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3015", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3015", }, { cve: "CVE-2011-3016", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3016", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving counter nodes, related to a \"read-after-free\" issue.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3016", url: "https://www.suse.com/security/cve/CVE-2011-3016", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3016", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3016", }, { cve: "CVE-2011-3017", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3017", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to database handling.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3017", url: "https://www.suse.com/security/cve/CVE-2011-3017", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3017", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3017", }, { cve: "CVE-2011-3018", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3018", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to path rendering.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3018", url: "https://www.suse.com/security/cve/CVE-2011-3018", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3018", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3018", }, { cve: "CVE-2011-3019", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3019", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Matroska video (aka MKV) file.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3019", url: "https://www.suse.com/security/cve/CVE-2011-3019", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3019", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3019", }, { cve: "CVE-2011-3020", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3020", }, ], notes: [ { category: "general", text: "Unspecified vulnerability in the Native Client validator implementation in Google Chrome before 17.0.963.56 has unknown impact and remote attack vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3020", url: "https://www.suse.com/security/cve/CVE-2011-3020", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3020", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3020", }, { cve: "CVE-2011-3021", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3021", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to subframe loading.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3021", url: "https://www.suse.com/security/cve/CVE-2011-3021", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3021", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3021", }, { cve: "CVE-2011-3022", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3022", }, ], notes: [ { category: "general", text: "translate/translate_manager.cc in Google Chrome before 17.0.963.56 and 19.x before 19.0.1036.7 uses an HTTP session to exchange data for translation, which allows remote attackers to obtain sensitive information by sniffing the network.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3022", url: "https://www.suse.com/security/cve/CVE-2011-3022", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3022", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3022", }, { cve: "CVE-2011-3023", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3023", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 17.0.963.56 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to drag-and-drop operations.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3023", url: "https://www.suse.com/security/cve/CVE-2011-3023", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3023", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3023", }, { cve: "CVE-2011-3024", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3024", }, ], notes: [ { category: "general", text: "Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service (application crash) via an empty X.509 certificate.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3024", url: "https://www.suse.com/security/cve/CVE-2011-3024", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3024", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3024", }, { cve: "CVE-2011-3025", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3025", }, ], notes: [ { category: "general", text: "Google Chrome before 17.0.963.56 does not properly parse H.264 data, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3025", url: "https://www.suse.com/security/cve/CVE-2011-3025", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3025", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3025", }, { cve: "CVE-2011-3026", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3026", }, ], notes: [ { category: "general", text: "Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3026", url: "https://www.suse.com/security/cve/CVE-2011-3026", }, { category: "external", summary: "SUSE Bug 747311 for CVE-2011-3026", url: "https://bugzilla.suse.com/747311", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3026", url: "https://bugzilla.suse.com/747327", }, { category: "external", summary: "SUSE Bug 747328 for CVE-2011-3026", url: "https://bugzilla.suse.com/747328", }, { category: "external", summary: "SUSE Bug 773612 for CVE-2011-3026", url: "https://bugzilla.suse.com/773612", }, { category: "external", summary: "SUSE Bug 854395 for CVE-2011-3026", url: "https://bugzilla.suse.com/854395", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3026", }, { cve: "CVE-2011-3027", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3027", }, ], notes: [ { category: "general", text: "Google Chrome before 17.0.963.56 does not properly perform a cast of an unspecified variable during handling of columns, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3027", url: "https://www.suse.com/security/cve/CVE-2011-3027", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3027", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3027", }, { cve: "CVE-2011-3031", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3031", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the element wrapper in Google V8, as used in Google Chrome before 17.0.963.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3031", url: "https://www.suse.com/security/cve/CVE-2011-3031", }, { category: "external", summary: "SUSE Bug 750407 for CVE-2011-3031", url: "https://bugzilla.suse.com/750407", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3031", }, { cve: "CVE-2011-3032", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3032", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of SVG values.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3032", url: "https://www.suse.com/security/cve/CVE-2011-3032", }, { category: "external", summary: "SUSE Bug 750407 for CVE-2011-3032", url: "https://bugzilla.suse.com/750407", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3032", }, { cve: "CVE-2011-3033", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3033", }, ], notes: [ { category: "general", text: "Buffer overflow in Skia, as used in Google Chrome before 17.0.963.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3033", url: "https://www.suse.com/security/cve/CVE-2011-3033", }, { category: "external", summary: "SUSE Bug 750407 for CVE-2011-3033", url: "https://bugzilla.suse.com/750407", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3033", }, { cve: "CVE-2011-3034", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3034", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving an SVG document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3034", url: "https://www.suse.com/security/cve/CVE-2011-3034", }, { category: "external", summary: "SUSE Bug 750407 for CVE-2011-3034", url: "https://bugzilla.suse.com/750407", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3034", }, { cve: "CVE-2011-3035", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3035", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG use elements.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3035", url: "https://www.suse.com/security/cve/CVE-2011-3035", }, { category: "external", summary: "SUSE Bug 750407 for CVE-2011-3035", url: "https://bugzilla.suse.com/750407", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3035", }, { cve: "CVE-2011-3036", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3036", }, ], notes: [ { category: "general", text: "Google Chrome before 17.0.963.65 does not properly perform a cast of an unspecified variable during handling of line boxes, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3036", url: "https://www.suse.com/security/cve/CVE-2011-3036", }, { category: "external", summary: "SUSE Bug 750407 for CVE-2011-3036", url: "https://bugzilla.suse.com/750407", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3036", }, { cve: "CVE-2011-3037", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3037", }, ], notes: [ { category: "general", text: "Google Chrome before 17.0.963.65 does not properly perform casts of unspecified variables during the splitting of anonymous blocks, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3037", url: "https://www.suse.com/security/cve/CVE-2011-3037", }, { category: "external", summary: "SUSE Bug 750407 for CVE-2011-3037", url: "https://bugzilla.suse.com/750407", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3037", }, { cve: "CVE-2011-3038", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3038", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to multi-column handling.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3038", url: "https://www.suse.com/security/cve/CVE-2011-3038", }, { category: "external", summary: "SUSE Bug 750407 for CVE-2011-3038", url: "https://bugzilla.suse.com/750407", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3038", }, { cve: "CVE-2011-3039", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3039", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to quote handling.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3039", url: "https://www.suse.com/security/cve/CVE-2011-3039", }, { category: "external", summary: "SUSE Bug 750407 for CVE-2011-3039", url: "https://bugzilla.suse.com/750407", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3039", }, { cve: "CVE-2011-3040", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3040", }, ], notes: [ { category: "general", text: "Google Chrome before 17.0.963.65 does not properly handle text, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3040", url: "https://www.suse.com/security/cve/CVE-2011-3040", }, { category: "external", summary: "SUSE Bug 750407 for CVE-2011-3040", url: "https://bugzilla.suse.com/750407", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3040", }, { cve: "CVE-2011-3041", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3041", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of class attributes.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3041", url: "https://www.suse.com/security/cve/CVE-2011-3041", }, { category: "external", summary: "SUSE Bug 750407 for CVE-2011-3041", url: "https://bugzilla.suse.com/750407", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3041", }, { cve: "CVE-2011-3042", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3042", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of table sections.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3042", url: "https://www.suse.com/security/cve/CVE-2011-3042", }, { category: "external", summary: "SUSE Bug 750407 for CVE-2011-3042", url: "https://bugzilla.suse.com/750407", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3042", }, { cve: "CVE-2011-3043", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3043", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a flexbox (aka flexible box) in conjunction with the floating of elements.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3043", url: "https://www.suse.com/security/cve/CVE-2011-3043", }, { category: "external", summary: "SUSE Bug 750407 for CVE-2011-3043", url: "https://bugzilla.suse.com/750407", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3043", }, { cve: "CVE-2011-3044", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3044", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG animation elements.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3044", url: "https://www.suse.com/security/cve/CVE-2011-3044", }, { category: "external", summary: "SUSE Bug 750407 for CVE-2011-3044", url: "https://bugzilla.suse.com/750407", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3044", }, { cve: "CVE-2011-3045", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3045", }, ], notes: [ { category: "general", text: "Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file, a different vulnerability than CVE-2011-3026.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3045", url: "https://www.suse.com/security/cve/CVE-2011-3045", }, { category: "external", summary: "SUSE Bug 752008 for CVE-2011-3045", url: "https://bugzilla.suse.com/752008", }, { category: "external", summary: "SUSE Bug 754456 for CVE-2011-3045", url: "https://bugzilla.suse.com/754456", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3045", }, { cve: "CVE-2011-3046", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3046", }, ], notes: [ { category: "general", text: "The extension subsystem in Google Chrome before 17.0.963.78 does not properly handle history navigation, which allows remote attackers to execute arbitrary code by leveraging a \"Universal XSS (UXSS)\" issue.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3046", url: "https://www.suse.com/security/cve/CVE-2011-3046", }, { category: "external", summary: "SUSE Bug 751466 for CVE-2011-3046", url: "https://bugzilla.suse.com/751466", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2011-3046", }, { cve: "CVE-2011-3047", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3047", }, ], notes: [ { category: "general", text: "The GPU process in Google Chrome before 17.0.963.79 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) by leveraging an error in the plug-in loading mechanism.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3047", url: "https://www.suse.com/security/cve/CVE-2011-3047", }, { category: "external", summary: "SUSE Bug 751738 for CVE-2011-3047", url: "https://bugzilla.suse.com/751738", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2011-3047", }, { cve: "CVE-2011-3049", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3049", }, ], notes: [ { category: "general", text: "Google Chrome before 17.0.963.83 does not properly restrict the extension web request API, which allows remote attackers to cause a denial of service (disrupted system requests) via a crafted extension.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3049", url: "https://www.suse.com/security/cve/CVE-2011-3049", }, { category: "external", summary: "SUSE Bug 754456 for CVE-2011-3049", url: "https://bugzilla.suse.com/754456", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3049", }, { cve: "CVE-2011-3050", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3050", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the :first-letter pseudo-element.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3050", url: "https://www.suse.com/security/cve/CVE-2011-3050", }, { category: "external", summary: "SUSE Bug 754456 for CVE-2011-3050", url: "https://bugzilla.suse.com/754456", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3050", }, { cve: "CVE-2011-3051", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3051", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the cross-fade function.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3051", url: "https://www.suse.com/security/cve/CVE-2011-3051", }, { category: "external", summary: "SUSE Bug 754456 for CVE-2011-3051", url: "https://bugzilla.suse.com/754456", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3051", }, { cve: "CVE-2011-3052", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3052", }, ], notes: [ { category: "general", text: "The WebGL implementation in Google Chrome before 17.0.963.83 does not properly handle CANVAS elements, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3052", url: "https://www.suse.com/security/cve/CVE-2011-3052", }, { category: "external", summary: "SUSE Bug 754456 for CVE-2011-3052", url: "https://bugzilla.suse.com/754456", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3052", }, { cve: "CVE-2011-3053", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3053", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to block splitting.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3053", url: "https://www.suse.com/security/cve/CVE-2011-3053", }, { category: "external", summary: "SUSE Bug 754456 for CVE-2011-3053", url: "https://bugzilla.suse.com/754456", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3053", }, { cve: "CVE-2011-3054", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3054", }, ], notes: [ { category: "general", text: "The WebUI privilege implementation in Google Chrome before 17.0.963.83 does not properly perform isolation, which allows remote attackers to bypass intended access restrictions via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3054", url: "https://www.suse.com/security/cve/CVE-2011-3054", }, { category: "external", summary: "SUSE Bug 754456 for CVE-2011-3054", url: "https://bugzilla.suse.com/754456", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3054", }, { cve: "CVE-2011-3055", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3055", }, ], notes: [ { category: "general", text: "The browser native UI in Google Chrome before 17.0.963.83 does not require user confirmation before an unpacked extension installation, which allows user-assisted remote attackers to have an unspecified impact via a crafted extension.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3055", url: "https://www.suse.com/security/cve/CVE-2011-3055", }, { category: "external", summary: "SUSE Bug 754456 for CVE-2011-3055", url: "https://bugzilla.suse.com/754456", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3055", }, { cve: "CVE-2011-3056", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3056", }, ], notes: [ { category: "general", text: "Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a \"magic iframe.\"", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3056", url: "https://www.suse.com/security/cve/CVE-2011-3056", }, { category: "external", summary: "SUSE Bug 754456 for CVE-2011-3056", url: "https://bugzilla.suse.com/754456", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3056", }, { cve: "CVE-2011-3057", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3057", }, ], notes: [ { category: "general", text: "Google V8, as used in Google Chrome before 17.0.963.83, allows remote attackers to cause a denial of service via vectors that trigger an invalid read operation.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3057", url: "https://www.suse.com/security/cve/CVE-2011-3057", }, { category: "external", summary: "SUSE Bug 754456 for CVE-2011-3057", url: "https://bugzilla.suse.com/754456", }, { category: "external", summary: "SUSE Bug 754458 for CVE-2011-3057", url: "https://bugzilla.suse.com/754458", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3057", }, { cve: "CVE-2011-3058", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3058", }, ], notes: [ { category: "general", text: "Google Chrome before 18.0.1025.142 does not properly handle the EUC-JP encoding system, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3058", url: "https://www.suse.com/security/cve/CVE-2011-3058", }, { category: "external", summary: "SUSE Bug 754458 for CVE-2011-3058", url: "https://bugzilla.suse.com/754458", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3058", }, { cve: "CVE-2011-3059", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3059", }, ], notes: [ { category: "general", text: "Google Chrome before 18.0.1025.142 does not properly handle SVG text elements, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3059", url: "https://www.suse.com/security/cve/CVE-2011-3059", }, { category: "external", summary: "SUSE Bug 754458 for CVE-2011-3059", url: "https://bugzilla.suse.com/754458", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3059", }, { cve: "CVE-2011-3060", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3060", }, ], notes: [ { category: "general", text: "Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3060", url: "https://www.suse.com/security/cve/CVE-2011-3060", }, { category: "external", summary: "SUSE Bug 754458 for CVE-2011-3060", url: "https://bugzilla.suse.com/754458", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3060", }, { cve: "CVE-2011-3061", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3061", }, ], notes: [ { category: "general", text: "Google Chrome before 18.0.1025.142 does not properly check X.509 certificates before use of a SPDY proxy, which might allow man-in-the-middle attackers to spoof servers or obtain sensitive information via a crafted certificate.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3061", url: "https://www.suse.com/security/cve/CVE-2011-3061", }, { category: "external", summary: "SUSE Bug 754458 for CVE-2011-3061", url: "https://bugzilla.suse.com/754458", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3061", }, { cve: "CVE-2011-3062", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3062", }, ], notes: [ { category: "general", text: "Off-by-one error in the OpenType Sanitizer in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted OpenType file.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3062", url: "https://www.suse.com/security/cve/CVE-2011-3062", }, { category: "external", summary: "SUSE Bug 754458 for CVE-2011-3062", url: "https://bugzilla.suse.com/754458", }, { category: "external", summary: "SUSE Bug 758408 for CVE-2011-3062", url: "https://bugzilla.suse.com/758408", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2011-3062", }, { cve: "CVE-2011-3063", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3063", }, ], notes: [ { category: "general", text: "Google Chrome before 18.0.1025.142 does not properly validate the renderer's navigation requests, which has unspecified impact and remote attack vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3063", url: "https://www.suse.com/security/cve/CVE-2011-3063", }, { category: "external", summary: "SUSE Bug 754458 for CVE-2011-3063", url: "https://bugzilla.suse.com/754458", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2011-3063", }, { cve: "CVE-2011-3064", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3064", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG clipping.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3064", url: "https://www.suse.com/security/cve/CVE-2011-3064", }, { category: "external", summary: "SUSE Bug 754458 for CVE-2011-3064", url: "https://bugzilla.suse.com/754458", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3064", }, { cve: "CVE-2011-3065", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3065", }, ], notes: [ { category: "general", text: "Skia, as used in Google Chrome before 18.0.1025.142, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3065", url: "https://www.suse.com/security/cve/CVE-2011-3065", }, { category: "external", summary: "SUSE Bug 754458 for CVE-2011-3065", url: "https://bugzilla.suse.com/754458", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3065", }, { cve: "CVE-2011-3066", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3066", }, ], notes: [ { category: "general", text: "Skia, as used in Google Chrome before 18.0.1025.151, does not properly perform clipping, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3066", url: "https://www.suse.com/security/cve/CVE-2011-3066", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3066", }, { cve: "CVE-2011-3067", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3067", }, ], notes: [ { category: "general", text: "Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to replacement of IFRAME elements.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3067", url: "https://www.suse.com/security/cve/CVE-2011-3067", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3067", }, { cve: "CVE-2011-3068", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3068", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to run-in boxes.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3068", url: "https://www.suse.com/security/cve/CVE-2011-3068", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3068", }, { cve: "CVE-2011-3069", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3069", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to line boxes.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3069", url: "https://www.suse.com/security/cve/CVE-2011-3069", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3069", }, { cve: "CVE-2011-3070", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3070", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the Google V8 bindings.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3070", url: "https://www.suse.com/security/cve/CVE-2011-3070", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3070", }, { cve: "CVE-2011-3071", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3071", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the HTMLMediaElement implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3071", url: "https://www.suse.com/security/cve/CVE-2011-3071", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3071", }, { cve: "CVE-2011-3072", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3072", }, ], notes: [ { category: "general", text: "Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to pop-up windows.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3072", url: "https://www.suse.com/security/cve/CVE-2011-3072", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3072", }, { cve: "CVE-2011-3073", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3073", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of SVG resources.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3073", url: "https://www.suse.com/security/cve/CVE-2011-3073", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3073", }, { cve: "CVE-2011-3074", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3074", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of media.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3074", url: "https://www.suse.com/security/cve/CVE-2011-3074", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3074", }, { cve: "CVE-2011-3075", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3075", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to style-application commands.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3075", url: "https://www.suse.com/security/cve/CVE-2011-3075", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3075", }, { cve: "CVE-2011-3076", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3076", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to focus handling.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3076", url: "https://www.suse.com/security/cve/CVE-2011-3076", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3076", }, { cve: "CVE-2011-3077", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3077", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving the script bindings, related to a \"read-after-free\" issue.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3077", url: "https://www.suse.com/security/cve/CVE-2011-3077", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3077", }, { cve: "CVE-2011-3078", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3078", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the floating of elements, a different vulnerability than CVE-2011-3081.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3078", url: "https://www.suse.com/security/cve/CVE-2011-3078", }, { category: "external", summary: "SUSE Bug 760264 for CVE-2011-3078", url: "https://bugzilla.suse.com/760264", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3078", }, { cve: "CVE-2011-3079", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3079", }, ], notes: [ { category: "general", text: "The Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168, as used in Mozilla Firefox before 38.0 and other products, does not properly validate messages, which has unspecified impact and attack vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3079", url: "https://www.suse.com/security/cve/CVE-2011-3079", }, { category: "external", summary: "SUSE Bug 1122983 for CVE-2011-3079", url: "https://bugzilla.suse.com/1122983", }, { category: "external", summary: "SUSE Bug 760264 for CVE-2011-3079", url: "https://bugzilla.suse.com/760264", }, { category: "external", summary: "SUSE Bug 930622 for CVE-2011-3079", url: "https://bugzilla.suse.com/930622", }, { category: "external", summary: "SUSE Bug 986639 for CVE-2011-3079", url: "https://bugzilla.suse.com/986639", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3079", }, { cve: "CVE-2011-3080", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3080", }, ], notes: [ { category: "general", text: "Race condition in the Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168 allows attackers to bypass intended sandbox restrictions via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3080", url: "https://www.suse.com/security/cve/CVE-2011-3080", }, { category: "external", summary: "SUSE Bug 760264 for CVE-2011-3080", url: "https://bugzilla.suse.com/760264", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3080", }, { cve: "CVE-2011-3081", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3081", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the floating of elements, a different vulnerability than CVE-2011-3078.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3081", url: "https://www.suse.com/security/cve/CVE-2011-3081", }, { category: "external", summary: "SUSE Bug 760264 for CVE-2011-3081", url: "https://bugzilla.suse.com/760264", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2011-3081", }, { cve: "CVE-2011-3083", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3083", }, ], notes: [ { category: "general", text: "browser/profiles/profile_impl_io_data.cc in Google Chrome before 19.0.1084.46 does not properly handle a malformed ftp URL in the SRC attribute of a VIDEO element, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted web page.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3083", url: "https://www.suse.com/security/cve/CVE-2011-3083", }, { category: "external", summary: "SUSE Bug 762481 for CVE-2011-3083", url: "https://bugzilla.suse.com/762481", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3083", }, { cve: "CVE-2011-3084", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3084", }, ], notes: [ { category: "general", text: "Google Chrome before 19.0.1084.46 does not use a dedicated process for the loading of links found on an internal page, which might allow attackers to bypass intended sandbox restrictions via a crafted page.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3084", url: "https://www.suse.com/security/cve/CVE-2011-3084", }, { category: "external", summary: "SUSE Bug 762481 for CVE-2011-3084", url: "https://bugzilla.suse.com/762481", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3084", }, { cve: "CVE-2011-3085", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3085", }, ], notes: [ { category: "general", text: "The Autofill feature in Google Chrome before 19.0.1084.46 does not properly restrict field values, which allows remote attackers to cause a denial of service (UI corruption) and possibly conduct spoofing attacks via vectors involving long values.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3085", url: "https://www.suse.com/security/cve/CVE-2011-3085", }, { category: "external", summary: "SUSE Bug 762481 for CVE-2011-3085", url: "https://bugzilla.suse.com/762481", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3085", }, { cve: "CVE-2011-3086", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3086", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a STYLE element.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3086", url: "https://www.suse.com/security/cve/CVE-2011-3086", }, { category: "external", summary: "SUSE Bug 762481 for CVE-2011-3086", url: "https://bugzilla.suse.com/762481", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2011-3086", }, { cve: "CVE-2011-3087", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3087", }, ], notes: [ { category: "general", text: "Google Chrome before 19.0.1084.46 does not properly perform window navigation, which has unspecified impact and remote attack vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3087", url: "https://www.suse.com/security/cve/CVE-2011-3087", }, { category: "external", summary: "SUSE Bug 762481 for CVE-2011-3087", url: "https://bugzilla.suse.com/762481", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2011-3087", }, { cve: "CVE-2011-3088", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3088", }, ], notes: [ { category: "general", text: "Google Chrome before 19.0.1084.46 does not properly draw hairlines, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3088", url: "https://www.suse.com/security/cve/CVE-2011-3088", }, { category: "external", summary: "SUSE Bug 762481 for CVE-2011-3088", url: "https://bugzilla.suse.com/762481", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3088", }, { cve: "CVE-2011-3089", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3089", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving tables.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3089", url: "https://www.suse.com/security/cve/CVE-2011-3089", }, { category: "external", summary: "SUSE Bug 762481 for CVE-2011-3089", url: "https://bugzilla.suse.com/762481", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2011-3089", }, { cve: "CVE-2011-3090", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3090", }, ], notes: [ { category: "general", text: "Race condition in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to worker processes.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3090", url: "https://www.suse.com/security/cve/CVE-2011-3090", }, { category: "external", summary: "SUSE Bug 762481 for CVE-2011-3090", url: "https://bugzilla.suse.com/762481", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3090", }, { cve: "CVE-2011-3091", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3091", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the IndexedDB implementation in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3091", url: "https://www.suse.com/security/cve/CVE-2011-3091", }, { category: "external", summary: "SUSE Bug 762481 for CVE-2011-3091", url: "https://bugzilla.suse.com/762481", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2011-3091", }, { cve: "CVE-2011-3092", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3092", }, ], notes: [ { category: "general", text: "The regex implementation in Google V8, as used in Google Chrome before 19.0.1084.46, allows remote attackers to cause a denial of service (invalid write operation) or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3092", url: "https://www.suse.com/security/cve/CVE-2011-3092", }, { category: "external", summary: "SUSE Bug 762481 for CVE-2011-3092", url: "https://bugzilla.suse.com/762481", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3092", }, { cve: "CVE-2011-3093", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3093", }, ], notes: [ { category: "general", text: "Google Chrome before 19.0.1084.46 does not properly handle glyphs, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3093", url: "https://www.suse.com/security/cve/CVE-2011-3093", }, { category: "external", summary: "SUSE Bug 762481 for CVE-2011-3093", url: "https://bugzilla.suse.com/762481", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3093", }, { cve: "CVE-2011-3094", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3094", }, ], notes: [ { category: "general", text: "Google Chrome before 19.0.1084.46 does not properly handle Tibetan text, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3094", url: "https://www.suse.com/security/cve/CVE-2011-3094", }, { category: "external", summary: "SUSE Bug 762481 for CVE-2011-3094", url: "https://bugzilla.suse.com/762481", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3094", }, { cve: "CVE-2011-3095", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3095", }, ], notes: [ { category: "general", text: "The OGG container in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3095", url: "https://www.suse.com/security/cve/CVE-2011-3095", }, { category: "external", summary: "SUSE Bug 762481 for CVE-2011-3095", url: "https://bugzilla.suse.com/762481", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2011-3095", }, { cve: "CVE-2011-3096", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3096", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 19.0.1084.46 on Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging an error in the GTK implementation of the omnibox.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3096", url: "https://www.suse.com/security/cve/CVE-2011-3096", }, { category: "external", summary: "SUSE Bug 762481 for CVE-2011-3096", url: "https://bugzilla.suse.com/762481", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3096", }, { cve: "CVE-2011-3098", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3098", }, ], notes: [ { category: "general", text: "Google Chrome before 19.0.1084.46 on Windows uses an incorrect search path for the Windows Media Player plug-in, which might allow local users to gain privileges via a Trojan horse plug-in in an unspecified directory.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3098", url: "https://www.suse.com/security/cve/CVE-2011-3098", }, { category: "external", summary: "SUSE Bug 762481 for CVE-2011-3098", url: "https://bugzilla.suse.com/762481", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3098", }, { cve: "CVE-2011-3100", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3100", }, ], notes: [ { category: "general", text: "Google Chrome before 19.0.1084.46 does not properly draw dash paths, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3100", url: "https://www.suse.com/security/cve/CVE-2011-3100", }, { category: "external", summary: "SUSE Bug 762481 for CVE-2011-3100", url: "https://bugzilla.suse.com/762481", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3100", }, { cve: "CVE-2011-3101", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3101", }, ], notes: [ { category: "general", text: "Google Chrome before 19.0.1084.46 on Linux does not properly mitigate an unspecified flaw in an NVIDIA driver, which has unknown impact and attack vectors. NOTE: see CVE-2012-3105 for the related MFSA 2012-34 issue in Mozilla products.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3101", url: "https://www.suse.com/security/cve/CVE-2011-3101", }, { category: "external", summary: "SUSE Bug 762481 for CVE-2011-3101", url: "https://bugzilla.suse.com/762481", }, { category: "external", summary: "SUSE Bug 765204 for CVE-2011-3101", url: "https://bugzilla.suse.com/765204", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2011-3101", }, { cve: "CVE-2011-3102", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3102", }, ], notes: [ { category: "general", text: "Off-by-one error in libxml2, as used in Google Chrome before 19.0.1084.46 and other products, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3102", url: "https://www.suse.com/security/cve/CVE-2011-3102", }, { category: "external", summary: "SUSE Bug 1123919 for CVE-2011-3102", url: "https://bugzilla.suse.com/1123919", }, { category: "external", summary: "SUSE Bug 762481 for CVE-2011-3102", url: "https://bugzilla.suse.com/762481", }, { category: "external", summary: "SUSE Bug 764538 for CVE-2011-3102", url: "https://bugzilla.suse.com/764538", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3102", }, { cve: "CVE-2011-3903", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3903", }, ], notes: [ { category: "general", text: "Google Chrome before 16.0.912.63 does not properly perform regex matching, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3903", url: "https://www.suse.com/security/cve/CVE-2011-3903", }, { category: "external", summary: "SUSE Bug 736716 for CVE-2011-3903", url: "https://bugzilla.suse.com/736716", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3903", }, { cve: "CVE-2011-3904", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3904", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to bidirectional text (aka bidi) handling.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3904", url: "https://www.suse.com/security/cve/CVE-2011-3904", }, { category: "external", summary: "SUSE Bug 736716 for CVE-2011-3904", url: "https://bugzilla.suse.com/736716", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3904", }, { cve: "CVE-2011-3905", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3905", }, ], notes: [ { category: "general", text: "libxml2, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3905", url: "https://www.suse.com/security/cve/CVE-2011-3905", }, { category: "external", summary: "SUSE Bug 736716 for CVE-2011-3905", url: "https://bugzilla.suse.com/736716", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3905", }, { cve: "CVE-2011-3906", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3906", }, ], notes: [ { category: "general", text: "The PDF parser in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3906", url: "https://www.suse.com/security/cve/CVE-2011-3906", }, { category: "external", summary: "SUSE Bug 736716 for CVE-2011-3906", url: "https://bugzilla.suse.com/736716", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3906", }, { cve: "CVE-2011-3907", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3907", }, ], notes: [ { category: "general", text: "The view-source feature in Google Chrome before 16.0.912.63 allows remote attackers to spoof the URL bar via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3907", url: "https://www.suse.com/security/cve/CVE-2011-3907", }, { category: "external", summary: "SUSE Bug 736716 for CVE-2011-3907", url: "https://bugzilla.suse.com/736716", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3907", }, { cve: "CVE-2011-3908", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3908", }, ], notes: [ { category: "general", text: "Google Chrome before 16.0.912.63 does not properly parse SVG documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3908", url: "https://www.suse.com/security/cve/CVE-2011-3908", }, { category: "external", summary: "SUSE Bug 736716 for CVE-2011-3908", url: "https://bugzilla.suse.com/736716", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3908", }, { cve: "CVE-2011-3909", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3909", }, ], notes: [ { category: "general", text: "The Cascading Style Sheets (CSS) implementation in Google Chrome before 16.0.912.63 on 64-bit platforms does not properly manage property arrays, which allows remote attackers to cause a denial of service (memory corruption) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3909", url: "https://www.suse.com/security/cve/CVE-2011-3909", }, { category: "external", summary: "SUSE Bug 736716 for CVE-2011-3909", url: "https://bugzilla.suse.com/736716", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3909", }, { cve: "CVE-2011-3910", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3910", }, ], notes: [ { category: "general", text: "Google Chrome before 16.0.912.63 does not properly handle YUV video frames, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3910", url: "https://www.suse.com/security/cve/CVE-2011-3910", }, { category: "external", summary: "SUSE Bug 736716 for CVE-2011-3910", url: "https://bugzilla.suse.com/736716", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3910", }, { cve: "CVE-2011-3911", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3911", }, ], notes: [ { category: "general", text: "Google Chrome before 16.0.912.63 does not properly handle PDF documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3911", url: "https://www.suse.com/security/cve/CVE-2011-3911", }, { category: "external", summary: "SUSE Bug 736716 for CVE-2011-3911", url: "https://bugzilla.suse.com/736716", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3911", }, { cve: "CVE-2011-3912", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3912", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG filters.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3912", url: "https://www.suse.com/security/cve/CVE-2011-3912", }, { category: "external", summary: "SUSE Bug 736716 for CVE-2011-3912", url: "https://bugzilla.suse.com/736716", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3912", }, { cve: "CVE-2011-3914", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3914", }, ], notes: [ { category: "general", text: "The internationalization (aka i18n) functionality in Google V8, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3914", url: "https://www.suse.com/security/cve/CVE-2011-3914", }, { category: "external", summary: "SUSE Bug 736716 for CVE-2011-3914", url: "https://bugzilla.suse.com/736716", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3914", }, { cve: "CVE-2011-3915", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3915", }, ], notes: [ { category: "general", text: "Buffer overflow in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to PDF fonts.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3915", url: "https://www.suse.com/security/cve/CVE-2011-3915", }, { category: "external", summary: "SUSE Bug 736716 for CVE-2011-3915", url: "https://bugzilla.suse.com/736716", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3915", }, { cve: "CVE-2011-3916", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3916", }, ], notes: [ { category: "general", text: "Google Chrome before 16.0.912.63 does not properly handle PDF cross references, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3916", url: "https://www.suse.com/security/cve/CVE-2011-3916", }, { category: "external", summary: "SUSE Bug 736716 for CVE-2011-3916", url: "https://bugzilla.suse.com/736716", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3916", }, { cve: "CVE-2011-3917", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3917", }, ], notes: [ { category: "general", text: "Stack-based buffer overflow in FileWatcher in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3917", url: "https://www.suse.com/security/cve/CVE-2011-3917", }, { category: "external", summary: "SUSE Bug 736716 for CVE-2011-3917", url: "https://bugzilla.suse.com/736716", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3917", }, { cve: "CVE-2011-3919", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3919", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in libxml2, as used in Google Chrome before 16.0.912.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3919", url: "https://www.suse.com/security/cve/CVE-2011-3919", }, { category: "external", summary: "SUSE Bug 1123919 for CVE-2011-3919", url: "https://bugzilla.suse.com/1123919", }, { category: "external", summary: "SUSE Bug 739894 for CVE-2011-3919", url: "https://bugzilla.suse.com/739894", }, { category: "external", summary: "SUSE Bug 740493 for CVE-2011-3919", url: "https://bugzilla.suse.com/740493", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3919", }, { cve: "CVE-2011-3921", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3921", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 16.0.912.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving animation frames.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3921", url: "https://www.suse.com/security/cve/CVE-2011-3921", }, { category: "external", summary: "SUSE Bug 740493 for CVE-2011-3921", url: "https://bugzilla.suse.com/740493", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3921", }, { cve: "CVE-2011-3922", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3922", }, ], notes: [ { category: "general", text: "Stack-based buffer overflow in Google Chrome before 16.0.912.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to glyph handling.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3922", url: "https://www.suse.com/security/cve/CVE-2011-3922", }, { category: "external", summary: "SUSE Bug 739904 for CVE-2011-3922", url: "https://bugzilla.suse.com/739904", }, { category: "external", summary: "SUSE Bug 740493 for CVE-2011-3922", url: "https://bugzilla.suse.com/740493", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3922", }, { cve: "CVE-2011-3924", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3924", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM selections.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3924", url: "https://www.suse.com/security/cve/CVE-2011-3924", }, { category: "external", summary: "SUSE Bug 743319 for CVE-2011-3924", url: "https://bugzilla.suse.com/743319", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3924", }, { cve: "CVE-2011-3925", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3925", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the Safe Browsing feature in Google Chrome before 16.0.912.75 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via vectors related to a navigation entry and an interstitial page.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3925", url: "https://www.suse.com/security/cve/CVE-2011-3925", }, { category: "external", summary: "SUSE Bug 743319 for CVE-2011-3925", url: "https://bugzilla.suse.com/743319", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3925", }, { cve: "CVE-2011-3926", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3926", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in the tree builder in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3926", url: "https://www.suse.com/security/cve/CVE-2011-3926", }, { category: "external", summary: "SUSE Bug 743319 for CVE-2011-3926", url: "https://bugzilla.suse.com/743319", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3926", }, { cve: "CVE-2011-3927", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3927", }, ], notes: [ { category: "general", text: "Skia, as used in Google Chrome before 16.0.912.77, does not perform all required initialization of values, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3927", url: "https://www.suse.com/security/cve/CVE-2011-3927", }, { category: "external", summary: "SUSE Bug 743319 for CVE-2011-3927", url: "https://bugzilla.suse.com/743319", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3927", }, { cve: "CVE-2011-3928", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3928", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM handling.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3928", url: "https://www.suse.com/security/cve/CVE-2011-3928", }, { category: "external", summary: "SUSE Bug 743319 for CVE-2011-3928", url: "https://bugzilla.suse.com/743319", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3928", }, { cve: "CVE-2011-3953", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3953", }, ], notes: [ { category: "general", text: "Google Chrome before 17.0.963.46 does not prevent monitoring of the clipboard after a paste event, which has unspecified impact and remote attack vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3953", url: "https://www.suse.com/security/cve/CVE-2011-3953", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3953", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3953", }, { cve: "CVE-2011-3954", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3954", }, ], notes: [ { category: "general", text: "Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application crash) via vectors that trigger a large amount of database usage.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3954", url: "https://www.suse.com/security/cve/CVE-2011-3954", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3954", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3954", }, { cve: "CVE-2011-3955", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3955", }, ], notes: [ { category: "general", text: "Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors that trigger the aborting of an IndexedDB transaction.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3955", url: "https://www.suse.com/security/cve/CVE-2011-3955", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3955", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3955", }, { cve: "CVE-2011-3956", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3956", }, ], notes: [ { category: "general", text: "The extension implementation in Google Chrome before 17.0.963.46 does not properly handle sandboxed origins, which might allow remote attackers to bypass the Same Origin Policy via a crafted extension.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3956", url: "https://www.suse.com/security/cve/CVE-2011-3956", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3956", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3956", }, { cve: "CVE-2011-3957", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3957", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the garbage-collection functionality in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving PDF documents.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3957", url: "https://www.suse.com/security/cve/CVE-2011-3957", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3957", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3957", }, { cve: "CVE-2011-3958", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3958", }, ], notes: [ { category: "general", text: "Google Chrome before 17.0.963.46 does not properly perform casts of variables during handling of a column span, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3958", url: "https://www.suse.com/security/cve/CVE-2011-3958", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3958", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3958", }, { cve: "CVE-2011-3959", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3959", }, ], notes: [ { category: "general", text: "Buffer overflow in the locale implementation in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3959", url: "https://www.suse.com/security/cve/CVE-2011-3959", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3959", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3959", }, { cve: "CVE-2011-3960", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3960", }, ], notes: [ { category: "general", text: "Google Chrome before 17.0.963.46 does not properly decode audio data, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3960", url: "https://www.suse.com/security/cve/CVE-2011-3960", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3960", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3960", }, { cve: "CVE-2011-3961", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3961", }, ], notes: [ { category: "general", text: "Race condition in Google Chrome before 17.0.963.46 allows remote attackers to execute arbitrary code via vectors that trigger a crash of a utility process.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3961", url: "https://www.suse.com/security/cve/CVE-2011-3961", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3961", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2011-3961", }, { cve: "CVE-2011-3962", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3962", }, ], notes: [ { category: "general", text: "Google Chrome before 17.0.963.46 does not properly perform path clipping, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3962", url: "https://www.suse.com/security/cve/CVE-2011-3962", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3962", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3962", }, { cve: "CVE-2011-3963", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3963", }, ], notes: [ { category: "general", text: "Google Chrome before 17.0.963.46 does not properly handle PDF FAX images, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3963", url: "https://www.suse.com/security/cve/CVE-2011-3963", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3963", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3963", }, { cve: "CVE-2011-3964", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3964", }, ], notes: [ { category: "general", text: "Google Chrome before 17.0.963.46 does not properly implement the drag-and-drop feature, which makes it easier for remote attackers to spoof the URL bar via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3964", url: "https://www.suse.com/security/cve/CVE-2011-3964", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3964", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3964", }, { cve: "CVE-2011-3965", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3965", }, ], notes: [ { category: "general", text: "Google Chrome before 17.0.963.46 does not properly check signatures, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3965", url: "https://www.suse.com/security/cve/CVE-2011-3965", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3965", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3965", }, { cve: "CVE-2011-3966", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3966", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to error handling for Cascading Style Sheets (CSS) token-sequence data.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3966", url: "https://www.suse.com/security/cve/CVE-2011-3966", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3966", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2011-3966", }, { cve: "CVE-2011-3967", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3967", }, ], notes: [ { category: "general", text: "Unspecified vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application crash) via a crafted certificate.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3967", url: "https://www.suse.com/security/cve/CVE-2011-3967", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3967", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3967", }, { cve: "CVE-2011-3968", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3968", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving Cascading Style Sheets (CSS) token sequences.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3968", url: "https://www.suse.com/security/cve/CVE-2011-3968", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3968", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3968", }, { cve: "CVE-2011-3969", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3969", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to layout of SVG documents.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3969", url: "https://www.suse.com/security/cve/CVE-2011-3969", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3969", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3969", }, { cve: "CVE-2011-3970", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3970", }, ], notes: [ { category: "general", text: "libxslt, as used in Google Chrome before 17.0.963.46, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3970", url: "https://www.suse.com/security/cve/CVE-2011-3970", }, { category: "external", summary: "SUSE Bug 746039 for CVE-2011-3970", url: "https://bugzilla.suse.com/746039", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3970", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3970", }, { cve: "CVE-2011-3971", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3971", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to mousemove events.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3971", url: "https://www.suse.com/security/cve/CVE-2011-3971", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3971", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3971", }, { cve: "CVE-2011-3972", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2011-3972", }, ], notes: [ { category: "general", text: "The shader translator implementation in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2011-3972", url: "https://www.suse.com/security/cve/CVE-2011-3972", }, { category: "external", summary: "SUSE Bug 747327 for CVE-2011-3972", url: "https://bugzilla.suse.com/747327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2011-3972", }, { cve: "CVE-2012-1521", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-1521", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the XML parser in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-1521", url: "https://www.suse.com/security/cve/CVE-2012-1521", }, { category: "external", summary: "SUSE Bug 760264 for CVE-2012-1521", url: "https://bugzilla.suse.com/760264", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-1521", }, { cve: "CVE-2012-2807", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2807", }, ], notes: [ { category: "general", text: "Multiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and other products, on 64-bit Linux platforms allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2807", url: "https://www.suse.com/security/cve/CVE-2012-2807", }, { category: "external", summary: "SUSE Bug 1123919 for CVE-2012-2807", url: "https://bugzilla.suse.com/1123919", }, { category: "external", summary: "SUSE Bug 769181 for CVE-2012-2807", url: "https://bugzilla.suse.com/769181", }, { category: "external", summary: "SUSE Bug 769184 for CVE-2012-2807", url: "https://bugzilla.suse.com/769184", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-2807", }, { cve: "CVE-2012-2815", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2815", }, ], notes: [ { category: "general", text: "Google Chrome before 20.0.1132.43 allows remote attackers to obtain potentially sensitive information from a fragment identifier by leveraging access to an IFRAME element associated with a different domain.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2815", url: "https://www.suse.com/security/cve/CVE-2012-2815", }, { category: "external", summary: "SUSE Bug 769181 for CVE-2012-2815", url: "https://bugzilla.suse.com/769181", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-2815", }, { cve: "CVE-2012-2816", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2816", }, ], notes: [ { category: "general", text: "Google Chrome before 20.0.1132.43 on Windows does not properly isolate sandboxed processes, which might allow remote attackers to cause a denial of service (process interference) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2816", url: "https://www.suse.com/security/cve/CVE-2012-2816", }, { category: "external", summary: "SUSE Bug 769181 for CVE-2012-2816", url: "https://bugzilla.suse.com/769181", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-2816", }, { cve: "CVE-2012-2817", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2817", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to tables that have sections.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2817", url: "https://www.suse.com/security/cve/CVE-2012-2817", }, { category: "external", summary: "SUSE Bug 769181 for CVE-2012-2817", url: "https://bugzilla.suse.com/769181", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-2817", }, { cve: "CVE-2012-2818", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2818", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the layout of documents that use the Cascading Style Sheets (CSS) counters feature.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2818", url: "https://www.suse.com/security/cve/CVE-2012-2818", }, { category: "external", summary: "SUSE Bug 769181 for CVE-2012-2818", url: "https://bugzilla.suse.com/769181", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-2818", }, { cve: "CVE-2012-2819", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2819", }, ], notes: [ { category: "general", text: "The texSubImage2D implementation in the WebGL subsystem in Google Chrome before 20.0.1132.43 does not properly handle uploads to floating-point textures, which allows remote attackers to cause a denial of service (assertion failure and application crash) or possibly have unspecified other impact via a crafted web page, as demonstrated by certain WebGL performance tests, aka rdar problem 11520387.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2819", url: "https://www.suse.com/security/cve/CVE-2012-2819", }, { category: "external", summary: "SUSE Bug 769181 for CVE-2012-2819", url: "https://bugzilla.suse.com/769181", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-2819", }, { cve: "CVE-2012-2820", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2820", }, ], notes: [ { category: "general", text: "Google Chrome before 20.0.1132.43 does not properly implement SVG filters, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2820", url: "https://www.suse.com/security/cve/CVE-2012-2820", }, { category: "external", summary: "SUSE Bug 769181 for CVE-2012-2820", url: "https://bugzilla.suse.com/769181", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-2820", }, { cve: "CVE-2012-2821", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2821", }, ], notes: [ { category: "general", text: "The autofill implementation in Google Chrome before 20.0.1132.43 does not properly display text, which has unspecified impact and remote attack vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2821", url: "https://www.suse.com/security/cve/CVE-2012-2821", }, { category: "external", summary: "SUSE Bug 769181 for CVE-2012-2821", url: "https://bugzilla.suse.com/769181", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-2821", }, { cve: "CVE-2012-2823", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2823", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG resources.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2823", url: "https://www.suse.com/security/cve/CVE-2012-2823", }, { category: "external", summary: "SUSE Bug 769181 for CVE-2012-2823", url: "https://bugzilla.suse.com/769181", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-2823", }, { cve: "CVE-2012-2825", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2825", }, ], notes: [ { category: "general", text: "The XSL implementation in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service (incorrect read operation) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2825", url: "https://www.suse.com/security/cve/CVE-2012-2825", }, { category: "external", summary: "SUSE Bug 769181 for CVE-2012-2825", url: "https://bugzilla.suse.com/769181", }, { category: "external", summary: "SUSE Bug 769182 for CVE-2012-2825", url: "https://bugzilla.suse.com/769182", }, { category: "external", summary: "SUSE Bug 849019 for CVE-2012-2825", url: "https://bugzilla.suse.com/849019", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-2825", }, { cve: "CVE-2012-2826", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2826", }, ], notes: [ { category: "general", text: "Google Chrome before 20.0.1132.43 does not properly implement texture conversion, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2826", url: "https://www.suse.com/security/cve/CVE-2012-2826", }, { category: "external", summary: "SUSE Bug 769181 for CVE-2012-2826", url: "https://bugzilla.suse.com/769181", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-2826", }, { cve: "CVE-2012-2829", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2829", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the :first-letter pseudo-element.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2829", url: "https://www.suse.com/security/cve/CVE-2012-2829", }, { category: "external", summary: "SUSE Bug 769181 for CVE-2012-2829", url: "https://bugzilla.suse.com/769181", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-2829", }, { cve: "CVE-2012-2830", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2830", }, ], notes: [ { category: "general", text: "Google Chrome before 20.0.1132.43 does not properly set array values, which allows remote attackers to cause a denial of service (incorrect pointer use) or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2830", url: "https://www.suse.com/security/cve/CVE-2012-2830", }, { category: "external", summary: "SUSE Bug 769181 for CVE-2012-2830", url: "https://bugzilla.suse.com/769181", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-2830", }, { cve: "CVE-2012-2831", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2831", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG references.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2831", url: "https://www.suse.com/security/cve/CVE-2012-2831", }, { category: "external", summary: "SUSE Bug 769181 for CVE-2012-2831", url: "https://bugzilla.suse.com/769181", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-2831", }, { cve: "CVE-2012-2834", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2834", }, ], notes: [ { category: "general", text: "Integer overflow in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted data in the Matroska container format.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2834", url: "https://www.suse.com/security/cve/CVE-2012-2834", }, { category: "external", summary: "SUSE Bug 769181 for CVE-2012-2834", url: "https://bugzilla.suse.com/769181", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2012-2834", }, { cve: "CVE-2012-2842", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2842", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 20.0.1132.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to counter handling.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2842", url: "https://www.suse.com/security/cve/CVE-2012-2842", }, { category: "external", summary: "SUSE Bug 770821 for CVE-2012-2842", url: "https://bugzilla.suse.com/770821", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-2842", }, { cve: "CVE-2012-2843", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2843", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 20.0.1132.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to layout height tracking.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2843", url: "https://www.suse.com/security/cve/CVE-2012-2843", }, { category: "external", summary: "SUSE Bug 770821 for CVE-2012-2843", url: "https://bugzilla.suse.com/770821", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-2843", }, { cve: "CVE-2012-2865", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2865", }, ], notes: [ { category: "general", text: "Google Chrome before 21.0.1180.89 does not properly perform line breaking, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2865", url: "https://www.suse.com/security/cve/CVE-2012-2865", }, { category: "external", summary: "SUSE Bug 778005 for CVE-2012-2865", url: "https://bugzilla.suse.com/778005", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-2865", }, { cve: "CVE-2012-2866", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2866", }, ], notes: [ { category: "general", text: "Google Chrome before 21.0.1180.89 does not properly perform a cast of an unspecified variable during handling of run-in elements, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2866", url: "https://www.suse.com/security/cve/CVE-2012-2866", }, { category: "external", summary: "SUSE Bug 778005 for CVE-2012-2866", url: "https://bugzilla.suse.com/778005", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-2866", }, { cve: "CVE-2012-2867", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2867", }, ], notes: [ { category: "general", text: "The SPDY implementation in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service (application crash) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2867", url: "https://www.suse.com/security/cve/CVE-2012-2867", }, { category: "external", summary: "SUSE Bug 778005 for CVE-2012-2867", url: "https://bugzilla.suse.com/778005", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-2867", }, { cve: "CVE-2012-2868", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2868", }, ], notes: [ { category: "general", text: "Race condition in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving improper interaction between worker processes and an XMLHttpRequest (aka XHR) object.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2868", url: "https://www.suse.com/security/cve/CVE-2012-2868", }, { category: "external", summary: "SUSE Bug 778005 for CVE-2012-2868", url: "https://bugzilla.suse.com/778005", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-2868", }, { cve: "CVE-2012-2869", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2869", }, ], notes: [ { category: "general", text: "Google Chrome before 21.0.1180.89 does not properly load URLs, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a \"stale buffer.\"", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2869", url: "https://www.suse.com/security/cve/CVE-2012-2869", }, { category: "external", summary: "SUSE Bug 778005 for CVE-2012-2869", url: "https://bugzilla.suse.com/778005", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-2869", }, { cve: "CVE-2012-2870", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2870", }, ], notes: [ { category: "general", text: "libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly manage memory, which might allow remote attackers to cause a denial of service (application crash) via a crafted XSLT expression that is not properly identified during XPath navigation, related to (1) the xsltCompileLocationPathPattern function in libxslt/pattern.c and (2) the xsltGenerateIdFunction function in libxslt/functions.c.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2870", url: "https://www.suse.com/security/cve/CVE-2012-2870", }, { category: "external", summary: "SUSE Bug 778005 for CVE-2012-2870", url: "https://bugzilla.suse.com/778005", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-2870", }, { cve: "CVE-2012-2871", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2871", }, ], notes: [ { category: "general", text: "libxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly support a cast of an unspecified variable during handling of XSL transforms, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document, related to the _xmlNs data structure in include/libxml/tree.h.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2871", url: "https://www.suse.com/security/cve/CVE-2012-2871", }, { category: "external", summary: "SUSE Bug 1078828 for CVE-2012-2871", url: "https://bugzilla.suse.com/1078828", }, { category: "external", summary: "SUSE Bug 778005 for CVE-2012-2871", url: "https://bugzilla.suse.com/778005", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-2871", }, { cve: "CVE-2012-2872", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2872", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in an SSL interstitial page in Google Chrome before 21.0.1180.89 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2872", url: "https://www.suse.com/security/cve/CVE-2012-2872", }, { category: "external", summary: "SUSE Bug 778005 for CVE-2012-2872", url: "https://bugzilla.suse.com/778005", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-2872", }, { cve: "CVE-2012-2874", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2874", }, ], notes: [ { category: "general", text: "Skia, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an out-of-bounds write operation, a different vulnerability than CVE-2012-2883.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2874", url: "https://www.suse.com/security/cve/CVE-2012-2874", }, { category: "external", summary: "SUSE Bug 782257 for CVE-2012-2874", url: "https://bugzilla.suse.com/782257", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-2874", }, { cve: "CVE-2012-2876", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2876", }, ], notes: [ { category: "general", text: "Buffer overflow in the SSE2 optimization functionality in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2876", url: "https://www.suse.com/security/cve/CVE-2012-2876", }, { category: "external", summary: "SUSE Bug 782257 for CVE-2012-2876", url: "https://bugzilla.suse.com/782257", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-2876", }, { cve: "CVE-2012-2877", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2877", }, ], notes: [ { category: "general", text: "The extension system in Google Chrome before 22.0.1229.79 does not properly handle modal dialogs, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2877", url: "https://www.suse.com/security/cve/CVE-2012-2877", }, { category: "external", summary: "SUSE Bug 782257 for CVE-2012-2877", url: "https://bugzilla.suse.com/782257", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-2877", }, { cve: "CVE-2012-2878", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2878", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to plug-in handling.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2878", url: "https://www.suse.com/security/cve/CVE-2012-2878", }, { category: "external", summary: "SUSE Bug 782257 for CVE-2012-2878", url: "https://bugzilla.suse.com/782257", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-2878", }, { cve: "CVE-2012-2879", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2879", }, ], notes: [ { category: "general", text: "Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service (DOM topology corruption) via a crafted document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2879", url: "https://www.suse.com/security/cve/CVE-2012-2879", }, { category: "external", summary: "SUSE Bug 782257 for CVE-2012-2879", url: "https://bugzilla.suse.com/782257", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-2879", }, { cve: "CVE-2012-2880", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2880", }, ], notes: [ { category: "general", text: "Race condition in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the plug-in paint buffer.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2880", url: "https://www.suse.com/security/cve/CVE-2012-2880", }, { category: "external", summary: "SUSE Bug 782257 for CVE-2012-2880", url: "https://bugzilla.suse.com/782257", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-2880", }, { cve: "CVE-2012-2881", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2881", }, ], notes: [ { category: "general", text: "Google Chrome before 22.0.1229.79 does not properly handle plug-ins, which allows remote attackers to cause a denial of service (DOM tree corruption) or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2881", url: "https://www.suse.com/security/cve/CVE-2012-2881", }, { category: "external", summary: "SUSE Bug 782257 for CVE-2012-2881", url: "https://bugzilla.suse.com/782257", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-2881", }, { cve: "CVE-2012-2882", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2882", }, ], notes: [ { category: "general", text: "FFmpeg, as used in Google Chrome before 22.0.1229.79, does not properly handle OGG containers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a \"wild pointer\" issue.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2882", url: "https://www.suse.com/security/cve/CVE-2012-2882", }, { category: "external", summary: "SUSE Bug 782257 for CVE-2012-2882", url: "https://bugzilla.suse.com/782257", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-2882", }, { cve: "CVE-2012-2883", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2883", }, ], notes: [ { category: "general", text: "Skia, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an out-of-bounds write operation, a different vulnerability than CVE-2012-2874.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2883", url: "https://www.suse.com/security/cve/CVE-2012-2883", }, { category: "external", summary: "SUSE Bug 782257 for CVE-2012-2883", url: "https://bugzilla.suse.com/782257", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-2883", }, { cve: "CVE-2012-2884", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2884", }, ], notes: [ { category: "general", text: "Skia, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2884", url: "https://www.suse.com/security/cve/CVE-2012-2884", }, { category: "external", summary: "SUSE Bug 782257 for CVE-2012-2884", url: "https://bugzilla.suse.com/782257", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-2884", }, { cve: "CVE-2012-2885", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2885", }, ], notes: [ { category: "general", text: "Double free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to application exit.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2885", url: "https://www.suse.com/security/cve/CVE-2012-2885", }, { category: "external", summary: "SUSE Bug 782257 for CVE-2012-2885", url: "https://bugzilla.suse.com/782257", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-2885", }, { cve: "CVE-2012-2886", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2886", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Google V8 bindings, aka \"Universal XSS (UXSS).\"", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2886", url: "https://www.suse.com/security/cve/CVE-2012-2886", }, { category: "external", summary: "SUSE Bug 782257 for CVE-2012-2886", url: "https://bugzilla.suse.com/782257", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-2886", }, { cve: "CVE-2012-2887", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2887", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving onclick events.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2887", url: "https://www.suse.com/security/cve/CVE-2012-2887", }, { category: "external", summary: "SUSE Bug 782257 for CVE-2012-2887", url: "https://bugzilla.suse.com/782257", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-2887", }, { cve: "CVE-2012-2888", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2888", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG text references.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2888", url: "https://www.suse.com/security/cve/CVE-2012-2888", }, { category: "external", summary: "SUSE Bug 782257 for CVE-2012-2888", url: "https://bugzilla.suse.com/782257", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-2888", }, { cve: "CVE-2012-2889", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2889", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors involving frames, aka \"Universal XSS (UXSS).\"", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2889", url: "https://www.suse.com/security/cve/CVE-2012-2889", }, { category: "external", summary: "SUSE Bug 782257 for CVE-2012-2889", url: "https://bugzilla.suse.com/782257", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-2889", }, { cve: "CVE-2012-2891", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2891", }, ], notes: [ { category: "general", text: "The IPC implementation in Google Chrome before 22.0.1229.79 allows attackers to obtain potentially sensitive information about memory addresses via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2891", url: "https://www.suse.com/security/cve/CVE-2012-2891", }, { category: "external", summary: "SUSE Bug 782257 for CVE-2012-2891", url: "https://bugzilla.suse.com/782257", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-2891", }, { cve: "CVE-2012-2892", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2892", }, ], notes: [ { category: "general", text: "Unspecified vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to bypass the pop-up blocker via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2892", url: "https://www.suse.com/security/cve/CVE-2012-2892", }, { category: "external", summary: "SUSE Bug 782257 for CVE-2012-2892", url: "https://bugzilla.suse.com/782257", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-2892", }, { cve: "CVE-2012-2893", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2893", }, ], notes: [ { category: "general", text: "Double free vulnerability in libxslt, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XSL transforms.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2893", url: "https://www.suse.com/security/cve/CVE-2012-2893", }, { category: "external", summary: "SUSE Bug 782257 for CVE-2012-2893", url: "https://bugzilla.suse.com/782257", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-2893", }, { cve: "CVE-2012-2894", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2894", }, ], notes: [ { category: "general", text: "Google Chrome before 22.0.1229.79 does not properly handle graphics-context data structures, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2894", url: "https://www.suse.com/security/cve/CVE-2012-2894", }, { category: "external", summary: "SUSE Bug 782257 for CVE-2012-2894", url: "https://bugzilla.suse.com/782257", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-2894", }, { cve: "CVE-2012-2896", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-2896", }, ], notes: [ { category: "general", text: "Integer overflow in the WebGL implementation in Google Chrome before 22.0.1229.79 on Mac OS X allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-2896", url: "https://www.suse.com/security/cve/CVE-2012-2896", }, { category: "external", summary: "SUSE Bug 782257 for CVE-2012-2896", url: "https://bugzilla.suse.com/782257", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-2896", }, { cve: "CVE-2012-5130", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-5130", }, ], notes: [ { category: "general", text: "Skia, as used in Google Chrome before 23.0.1271.91, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-5130", url: "https://www.suse.com/security/cve/CVE-2012-5130", }, { category: "external", summary: "SUSE Bug 791234 for CVE-2012-5130", url: "https://bugzilla.suse.com/791234", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-5130", }, { cve: "CVE-2012-5131", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-5131", }, ], notes: [ { category: "general", text: "Google Chrome before 23.0.1271.91 on Mac OS X does not properly mitigate improper rendering behavior in the Intel GPU driver, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-5131", url: "https://www.suse.com/security/cve/CVE-2012-5131", }, { category: "external", summary: "SUSE Bug 791234 for CVE-2012-5131", url: "https://bugzilla.suse.com/791234", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-5131", }, { cve: "CVE-2012-5132", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-5132", }, ], notes: [ { category: "general", text: "Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service (application crash) via a response with chunked transfer coding.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-5132", url: "https://www.suse.com/security/cve/CVE-2012-5132", }, { category: "external", summary: "SUSE Bug 791234 for CVE-2012-5132", url: "https://bugzilla.suse.com/791234", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-5132", }, { cve: "CVE-2012-5133", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-5133", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG filters.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-5133", url: "https://www.suse.com/security/cve/CVE-2012-5133", }, { category: "external", summary: "SUSE Bug 791234 for CVE-2012-5133", url: "https://bugzilla.suse.com/791234", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-5133", }, { cve: "CVE-2012-5134", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-5134", }, ], notes: [ { category: "general", text: "Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome before 23.0.1271.91 and other products, allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted entities in an XML document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-5134", url: "https://www.suse.com/security/cve/CVE-2012-5134", }, { category: "external", summary: "SUSE Bug 1123919 for CVE-2012-5134", url: "https://bugzilla.suse.com/1123919", }, { category: "external", summary: "SUSE Bug 791234 for CVE-2012-5134", url: "https://bugzilla.suse.com/791234", }, { category: "external", summary: "SUSE Bug 793334 for CVE-2012-5134", url: "https://bugzilla.suse.com/793334", }, { category: "external", summary: "SUSE Bug 795039 for CVE-2012-5134", url: "https://bugzilla.suse.com/795039", }, { category: "external", summary: "SUSE Bug 804033 for CVE-2012-5134", url: "https://bugzilla.suse.com/804033", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-5134", }, { cve: "CVE-2012-5135", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-5135", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to printing.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-5135", url: "https://www.suse.com/security/cve/CVE-2012-5135", }, { category: "external", summary: "SUSE Bug 791234 for CVE-2012-5135", url: "https://bugzilla.suse.com/791234", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-5135", }, { cve: "CVE-2012-5136", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-5136", }, ], notes: [ { category: "general", text: "Google Chrome before 23.0.1271.91 does not properly perform a cast of an unspecified variable during handling of the INPUT element, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted HTML document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-5136", url: "https://www.suse.com/security/cve/CVE-2012-5136", }, { category: "external", summary: "SUSE Bug 791234 for CVE-2012-5136", url: "https://bugzilla.suse.com/791234", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-5136", }, { cve: "CVE-2012-5137", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-5137", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 23.0.1271.95 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the Media Source API.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-5137", url: "https://www.suse.com/security/cve/CVE-2012-5137", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2012-5137", }, { cve: "CVE-2012-5138", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-5138", }, ], notes: [ { category: "general", text: "Google Chrome before 23.0.1271.95 does not properly handle file paths, which has unspecified impact and attack vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-5138", url: "https://www.suse.com/security/cve/CVE-2012-5138", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2012-5138", }, { cve: "CVE-2012-5139", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-5139", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to visibility events.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-5139", url: "https://www.suse.com/security/cve/CVE-2012-5139", }, { category: "external", summary: "SUSE Bug 794075 for CVE-2012-5139", url: "https://bugzilla.suse.com/794075", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2012-5139", }, { cve: "CVE-2012-5140", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-5140", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the URL loader.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-5140", url: "https://www.suse.com/security/cve/CVE-2012-5140", }, { category: "external", summary: "SUSE Bug 794075 for CVE-2012-5140", url: "https://bugzilla.suse.com/794075", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2012-5140", }, { cve: "CVE-2012-5141", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-5141", }, ], notes: [ { category: "general", text: "Google Chrome before 23.0.1271.97 does not properly restrict instantiation of the Chromoting client plug-in, which has unspecified impact and attack vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-5141", url: "https://www.suse.com/security/cve/CVE-2012-5141", }, { category: "external", summary: "SUSE Bug 794075 for CVE-2012-5141", url: "https://bugzilla.suse.com/794075", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2012-5141", }, { cve: "CVE-2012-5142", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-5142", }, ], notes: [ { category: "general", text: "Google Chrome before 23.0.1271.97 does not properly handle history navigation, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-5142", url: "https://www.suse.com/security/cve/CVE-2012-5142", }, { category: "external", summary: "SUSE Bug 794075 for CVE-2012-5142", url: "https://bugzilla.suse.com/794075", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2012-5142", }, { cve: "CVE-2012-5143", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-5143", }, ], notes: [ { category: "general", text: "Integer overflow in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to PPAPI image buffers.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-5143", url: "https://www.suse.com/security/cve/CVE-2012-5143", }, { category: "external", summary: "SUSE Bug 794075 for CVE-2012-5143", url: "https://bugzilla.suse.com/794075", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2012-5143", }, { cve: "CVE-2012-5144", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-5144", }, ], notes: [ { category: "general", text: "Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC decoding, which allows remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via vectors related to \"an off-by-one overwrite when switching to LTP profile from MAIN.\"", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-5144", url: "https://www.suse.com/security/cve/CVE-2012-5144", }, { category: "external", summary: "SUSE Bug 794075 for CVE-2012-5144", url: "https://bugzilla.suse.com/794075", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2012-5144", }, { cve: "CVE-2012-5145", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-5145", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG layout.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-5145", url: "https://www.suse.com/security/cve/CVE-2012-5145", }, { category: "external", summary: "SUSE Bug 798326 for CVE-2012-5145", url: "https://bugzilla.suse.com/798326", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-5145", }, { cve: "CVE-2012-5146", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-5146", }, ], notes: [ { category: "general", text: "Google Chrome before 24.0.1312.52 allows remote attackers to bypass the Same Origin Policy via a malformed URL.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-5146", url: "https://www.suse.com/security/cve/CVE-2012-5146", }, { category: "external", summary: "SUSE Bug 798326 for CVE-2012-5146", url: "https://bugzilla.suse.com/798326", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-5146", }, { cve: "CVE-2012-5147", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-5147", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM handling.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-5147", url: "https://www.suse.com/security/cve/CVE-2012-5147", }, { category: "external", summary: "SUSE Bug 798326 for CVE-2012-5147", url: "https://bugzilla.suse.com/798326", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-5147", }, { cve: "CVE-2012-5148", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-5148", }, ], notes: [ { category: "general", text: "The hyphenation functionality in Google Chrome before 24.0.1312.52 does not properly validate file names, which has unspecified impact and attack vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-5148", url: "https://www.suse.com/security/cve/CVE-2012-5148", }, { category: "external", summary: "SUSE Bug 798326 for CVE-2012-5148", url: "https://bugzilla.suse.com/798326", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-5148", }, { cve: "CVE-2012-5149", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-5149", }, ], notes: [ { category: "general", text: "Integer overflow in the audio IPC layer in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-5149", url: "https://www.suse.com/security/cve/CVE-2012-5149", }, { category: "external", summary: "SUSE Bug 798326 for CVE-2012-5149", url: "https://bugzilla.suse.com/798326", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-5149", }, { cve: "CVE-2012-5150", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-5150", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving seek operations on video data.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-5150", url: "https://www.suse.com/security/cve/CVE-2012-5150", }, { category: "external", summary: "SUSE Bug 798326 for CVE-2012-5150", url: "https://bugzilla.suse.com/798326", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-5150", }, { cve: "CVE-2012-5152", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-5152", }, ], notes: [ { category: "general", text: "Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors involving seek operations on video data.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-5152", url: "https://www.suse.com/security/cve/CVE-2012-5152", }, { category: "external", summary: "SUSE Bug 798326 for CVE-2012-5152", url: "https://bugzilla.suse.com/798326", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-5152", }, { cve: "CVE-2012-5153", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-5153", }, ], notes: [ { category: "general", text: "Google V8 before 3.14.5.3, as used in Google Chrome before 24.0.1312.52, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds access to stack memory.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-5153", url: "https://www.suse.com/security/cve/CVE-2012-5153", }, { category: "external", summary: "SUSE Bug 798326 for CVE-2012-5153", url: "https://bugzilla.suse.com/798326", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2012-5153", }, { cve: "CVE-2012-5154", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2012-5154", }, ], notes: [ { category: "general", text: "Integer overflow in Google Chrome before 24.0.1312.52 on Windows allows attackers to cause a denial of service or possibly have unspecified other impact via vectors related to allocation of shared memory.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2012-5154", url: "https://www.suse.com/security/cve/CVE-2012-5154", }, { category: "external", summary: "SUSE Bug 798326 for CVE-2012-5154", url: "https://bugzilla.suse.com/798326", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2012-5154", }, { cve: "CVE-2013-0830", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0830", }, ], notes: [ { category: "general", text: "The IPC layer in Google Chrome before 24.0.1312.52 on Windows omits a NUL character required for termination of an unspecified data structure, which has unknown impact and attack vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0830", url: "https://www.suse.com/security/cve/CVE-2013-0830", }, { category: "external", summary: "SUSE Bug 798326 for CVE-2013-0830", url: "https://bugzilla.suse.com/798326", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-0830", }, { cve: "CVE-2013-0831", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0831", }, ], notes: [ { category: "general", text: "Directory traversal vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to have an unspecified impact by leveraging access to an extension process.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0831", url: "https://www.suse.com/security/cve/CVE-2013-0831", }, { category: "external", summary: "SUSE Bug 798326 for CVE-2013-0831", url: "https://bugzilla.suse.com/798326", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-0831", }, { cve: "CVE-2013-0832", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0832", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to printing.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0832", url: "https://www.suse.com/security/cve/CVE-2013-0832", }, { category: "external", summary: "SUSE Bug 798326 for CVE-2013-0832", url: "https://bugzilla.suse.com/798326", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-0832", }, { cve: "CVE-2013-0833", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0833", }, ], notes: [ { category: "general", text: "Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to printing.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0833", url: "https://www.suse.com/security/cve/CVE-2013-0833", }, { category: "external", summary: "SUSE Bug 798326 for CVE-2013-0833", url: "https://bugzilla.suse.com/798326", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-0833", }, { cve: "CVE-2013-0834", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0834", }, ], notes: [ { category: "general", text: "Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors involving glyphs.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0834", url: "https://www.suse.com/security/cve/CVE-2013-0834", }, { category: "external", summary: "SUSE Bug 798326 for CVE-2013-0834", url: "https://bugzilla.suse.com/798326", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-0834", }, { cve: "CVE-2013-0835", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0835", }, ], notes: [ { category: "general", text: "Unspecified vulnerability in the Geolocation implementation in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (application crash) via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0835", url: "https://www.suse.com/security/cve/CVE-2013-0835", }, { category: "external", summary: "SUSE Bug 798326 for CVE-2013-0835", url: "https://bugzilla.suse.com/798326", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-0835", }, { cve: "CVE-2013-0836", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0836", }, ], notes: [ { category: "general", text: "Google V8 before 3.14.5.3, as used in Google Chrome before 24.0.1312.52, does not properly implement garbage collection, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0836", url: "https://www.suse.com/security/cve/CVE-2013-0836", }, { category: "external", summary: "SUSE Bug 798326 for CVE-2013-0836", url: "https://bugzilla.suse.com/798326", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-0836", }, { cve: "CVE-2013-0837", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0837", }, ], notes: [ { category: "general", text: "Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of extension tabs.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0837", url: "https://www.suse.com/security/cve/CVE-2013-0837", }, { category: "external", summary: "SUSE Bug 798326 for CVE-2013-0837", url: "https://bugzilla.suse.com/798326", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-0837", }, { cve: "CVE-2013-0838", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0838", }, ], notes: [ { category: "general", text: "Google Chrome before 24.0.1312.52 on Linux uses weak permissions for shared memory segments, which has unspecified impact and attack vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0838", url: "https://www.suse.com/security/cve/CVE-2013-0838", }, { category: "external", summary: "SUSE Bug 798326 for CVE-2013-0838", url: "https://bugzilla.suse.com/798326", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-0838", }, { cve: "CVE-2013-0879", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0879", }, ], notes: [ { category: "general", text: "Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly implement web audio nodes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0879", url: "https://www.suse.com/security/cve/CVE-2013-0879", }, { category: "external", summary: "SUSE Bug 804986 for CVE-2013-0879", url: "https://bugzilla.suse.com/804986", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-0879", }, { cve: "CVE-2013-0880", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0880", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to databases.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0880", url: "https://www.suse.com/security/cve/CVE-2013-0880", }, { category: "external", summary: "SUSE Bug 804986 for CVE-2013-0880", url: "https://bugzilla.suse.com/804986", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-0880", }, { cve: "CVE-2013-0881", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0881", }, ], notes: [ { category: "general", text: "Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service (incorrect read operation) via crafted data in the Matroska container format.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0881", url: "https://www.suse.com/security/cve/CVE-2013-0881", }, { category: "external", summary: "SUSE Bug 804986 for CVE-2013-0881", url: "https://bugzilla.suse.com/804986", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-0881", }, { cve: "CVE-2013-0882", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0882", }, ], notes: [ { category: "general", text: "Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service (incorrect memory access) or possibly have unspecified other impact via a large number of SVG parameters.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0882", url: "https://www.suse.com/security/cve/CVE-2013-0882", }, { category: "external", summary: "SUSE Bug 804986 for CVE-2013-0882", url: "https://bugzilla.suse.com/804986", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-0882", }, { cve: "CVE-2013-0883", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0883", }, ], notes: [ { category: "general", text: "Skia, as used in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service (incorrect read operation) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0883", url: "https://www.suse.com/security/cve/CVE-2013-0883", }, { category: "external", summary: "SUSE Bug 804986 for CVE-2013-0883", url: "https://bugzilla.suse.com/804986", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-0883", }, { cve: "CVE-2013-0884", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0884", }, ], notes: [ { category: "general", text: "Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly load Native Client (aka NaCl) code, which has unspecified impact and attack vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0884", url: "https://www.suse.com/security/cve/CVE-2013-0884", }, { category: "external", summary: "SUSE Bug 804986 for CVE-2013-0884", url: "https://bugzilla.suse.com/804986", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-0884", }, { cve: "CVE-2013-0885", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0885", }, ], notes: [ { category: "general", text: "Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly restrict API privileges during interaction with the Chrome Web Store, which has unspecified impact and attack vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0885", url: "https://www.suse.com/security/cve/CVE-2013-0885", }, { category: "external", summary: "SUSE Bug 804986 for CVE-2013-0885", url: "https://bugzilla.suse.com/804986", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-0885", }, { cve: "CVE-2013-0886", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0886", }, ], notes: [ { category: "general", text: "Google Chrome before 25.0.1364.99 on Mac OS X does not properly implement signal handling for Native Client (aka NaCl) code, which has unspecified impact and attack vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0886", url: "https://www.suse.com/security/cve/CVE-2013-0886", }, { category: "external", summary: "SUSE Bug 804986 for CVE-2013-0886", url: "https://bugzilla.suse.com/804986", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-0886", }, { cve: "CVE-2013-0887", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0887", }, ], notes: [ { category: "general", text: "The developer-tools process in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly restrict privileges during interaction with a connected server, which has unspecified impact and attack vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0887", url: "https://www.suse.com/security/cve/CVE-2013-0887", }, { category: "external", summary: "SUSE Bug 804986 for CVE-2013-0887", url: "https://bugzilla.suse.com/804986", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-0887", }, { cve: "CVE-2013-0888", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0888", }, ], notes: [ { category: "general", text: "Skia, as used in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to a \"user gesture check for dangerous file downloads.\"", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0888", url: "https://www.suse.com/security/cve/CVE-2013-0888", }, { category: "external", summary: "SUSE Bug 804986 for CVE-2013-0888", url: "https://bugzilla.suse.com/804986", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-0888", }, { cve: "CVE-2013-0889", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0889", }, ], notes: [ { category: "general", text: "Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly enforce a user gesture requirement before proceeding with a file download, which might make it easier for remote attackers to execute arbitrary code via a crafted file.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0889", url: "https://www.suse.com/security/cve/CVE-2013-0889", }, { category: "external", summary: "SUSE Bug 804986 for CVE-2013-0889", url: "https://bugzilla.suse.com/804986", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-0889", }, { cve: "CVE-2013-0890", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0890", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in the IPC layer in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allow remote attackers to cause a denial of service (memory corruption) or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0890", url: "https://www.suse.com/security/cve/CVE-2013-0890", }, { category: "external", summary: "SUSE Bug 804986 for CVE-2013-0890", url: "https://bugzilla.suse.com/804986", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-0890", }, { cve: "CVE-2013-0891", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0891", }, ], notes: [ { category: "general", text: "Integer overflow in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a blob.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0891", url: "https://www.suse.com/security/cve/CVE-2013-0891", }, { category: "external", summary: "SUSE Bug 804986 for CVE-2013-0891", url: "https://bugzilla.suse.com/804986", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-0891", }, { cve: "CVE-2013-0892", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0892", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in the IPC layer in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0892", url: "https://www.suse.com/security/cve/CVE-2013-0892", }, { category: "external", summary: "SUSE Bug 804986 for CVE-2013-0892", url: "https://bugzilla.suse.com/804986", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-0892", }, { cve: "CVE-2013-0893", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0893", }, ], notes: [ { category: "general", text: "Race condition in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to media.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0893", url: "https://www.suse.com/security/cve/CVE-2013-0893", }, { category: "external", summary: "SUSE Bug 804986 for CVE-2013-0893", url: "https://bugzilla.suse.com/804986", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-0893", }, { cve: "CVE-2013-0894", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0894", }, ], notes: [ { category: "general", text: "Buffer overflow in the vorbis_parse_setup_hdr_floors function in the Vorbis decoder in vorbisdec.c in libavcodec in FFmpeg through 1.1.3, as used in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X and other products, allows remote attackers to cause a denial of service (divide-by-zero error or out-of-bounds array access) or possibly have unspecified other impact via vectors involving a zero value for a bark map size.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0894", url: "https://www.suse.com/security/cve/CVE-2013-0894", }, { category: "external", summary: "SUSE Bug 804986 for CVE-2013-0894", url: "https://bugzilla.suse.com/804986", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-0894", }, { cve: "CVE-2013-0895", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0895", }, ], notes: [ { category: "general", text: "Google Chrome before 25.0.1364.97 on Linux, and before 25.0.1364.99 on Mac OS X, does not properly handle pathnames during copy operations, which might make it easier for remote attackers to execute arbitrary programs via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0895", url: "https://www.suse.com/security/cve/CVE-2013-0895", }, { category: "external", summary: "SUSE Bug 804986 for CVE-2013-0895", url: "https://bugzilla.suse.com/804986", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-0895", }, { cve: "CVE-2013-0896", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0896", }, ], notes: [ { category: "general", text: "Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly manage memory during message handling for plug-ins, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0896", url: "https://www.suse.com/security/cve/CVE-2013-0896", }, { category: "external", summary: "SUSE Bug 804986 for CVE-2013-0896", url: "https://bugzilla.suse.com/804986", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-0896", }, { cve: "CVE-2013-0897", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0897", }, ], notes: [ { category: "general", text: "Off-by-one error in the PDF functionality in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service via a crafted document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0897", url: "https://www.suse.com/security/cve/CVE-2013-0897", }, { category: "external", summary: "SUSE Bug 804986 for CVE-2013-0897", url: "https://bugzilla.suse.com/804986", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-0897", }, { cve: "CVE-2013-0898", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0898", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a URL.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0898", url: "https://www.suse.com/security/cve/CVE-2013-0898", }, { category: "external", summary: "SUSE Bug 804986 for CVE-2013-0898", url: "https://bugzilla.suse.com/804986", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-0898", }, { cve: "CVE-2013-0899", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0899", }, ], notes: [ { category: "general", text: "Integer overflow in the padding implementation in the opus_packet_parse_impl function in src/opus_decoder.c in Opus before 1.0.2, as used in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a long packet.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0899", url: "https://www.suse.com/security/cve/CVE-2013-0899", }, { category: "external", summary: "SUSE Bug 804986 for CVE-2013-0899", url: "https://bugzilla.suse.com/804986", }, { category: "external", summary: "SUSE Bug 830356 for CVE-2013-0899", url: "https://bugzilla.suse.com/830356", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-0899", }, { cve: "CVE-2013-0900", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-0900", }, ], notes: [ { category: "general", text: "Race condition in the International Components for Unicode (ICU) functionality in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-0900", url: "https://www.suse.com/security/cve/CVE-2013-0900", }, { category: "external", summary: "SUSE Bug 804986 for CVE-2013-0900", url: "https://bugzilla.suse.com/804986", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-0900", }, { cve: "CVE-2013-2838", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-2838", }, ], notes: [ { category: "general", text: "Google V8, as used in Google Chrome before 27.0.1453.93, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-2838", url: "https://www.suse.com/security/cve/CVE-2013-2838", }, { category: "external", summary: "SUSE Bug 821601 for CVE-2013-2838", url: "https://bugzilla.suse.com/821601", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-2838", }, { cve: "CVE-2013-2906", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-2906", }, ], notes: [ { category: "general", text: "Multiple race conditions in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to threading in core/html/HTMLMediaElement.cpp, core/platform/audio/AudioDSPKernelProcessor.cpp, core/platform/audio/HRTFElevation.cpp, and modules/webaudio/ConvolverNode.cpp.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-2906", url: "https://www.suse.com/security/cve/CVE-2013-2906", }, { category: "external", summary: "SUSE Bug 844084 for CVE-2013-2906", url: "https://bugzilla.suse.com/844084", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-2906", }, { cve: "CVE-2013-2907", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-2907", }, ], notes: [ { category: "general", text: "The Window.prototype object implementation in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-2907", url: "https://www.suse.com/security/cve/CVE-2013-2907", }, { category: "external", summary: "SUSE Bug 844084 for CVE-2013-2907", url: "https://bugzilla.suse.com/844084", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-2907", }, { cve: "CVE-2013-2908", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-2908", }, ], notes: [ { category: "general", text: "Google Chrome before 30.0.1599.66 uses incorrect function calls to determine the values of NavigationEntry objects, which allows remote attackers to spoof the address bar via vectors involving a response with a 204 (aka No Content) status code.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-2908", url: "https://www.suse.com/security/cve/CVE-2013-2908", }, { category: "external", summary: "SUSE Bug 844084 for CVE-2013-2908", url: "https://bugzilla.suse.com/844084", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-2908", }, { cve: "CVE-2013-2909", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-2909", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to inline-block rendering for bidirectional Unicode text in an element isolated from its siblings.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-2909", url: "https://www.suse.com/security/cve/CVE-2013-2909", }, { category: "external", summary: "SUSE Bug 844084 for CVE-2013-2909", url: "https://bugzilla.suse.com/844084", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-2909", }, { cve: "CVE-2013-2910", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-2910", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in modules/webaudio/AudioScheduledSourceNode.cpp in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-2910", url: "https://www.suse.com/security/cve/CVE-2013-2910", }, { category: "external", summary: "SUSE Bug 844084 for CVE-2013-2910", url: "https://bugzilla.suse.com/844084", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-2910", }, { cve: "CVE-2013-2911", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-2911", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the XSLStyleSheet::compileStyleSheet function in core/xml/XSLStyleSheetLibxslt.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of post-failure recompilation in unspecified libxslt versions.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-2911", url: "https://www.suse.com/security/cve/CVE-2013-2911", }, { category: "external", summary: "SUSE Bug 844084 for CVE-2013-2911", url: "https://bugzilla.suse.com/844084", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-2911", }, { cve: "CVE-2013-2912", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-2912", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the PepperInProcessRouter::SendToHost function in content/renderer/pepper/pepper_in_process_router.cc in the Pepper Plug-in API (PPAPI) in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a resource-destruction message.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-2912", url: "https://www.suse.com/security/cve/CVE-2013-2912", }, { category: "external", summary: "SUSE Bug 844084 for CVE-2013-2912", url: "https://bugzilla.suse.com/844084", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-2912", }, { cve: "CVE-2013-2913", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-2913", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the XMLDocumentParser::append function in core/xml/parser/XMLDocumentParser.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving an XML document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-2913", url: "https://www.suse.com/security/cve/CVE-2013-2913", }, { category: "external", summary: "SUSE Bug 844084 for CVE-2013-2913", url: "https://bugzilla.suse.com/844084", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-2913", }, { cve: "CVE-2013-2914", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-2914", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the color-chooser dialog in Google Chrome before 30.0.1599.66 on Windows allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to color_chooser_dialog.cc and color_chooser_win.cc in browser/ui/views/.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-2914", url: "https://www.suse.com/security/cve/CVE-2013-2914", }, { category: "external", summary: "SUSE Bug 844084 for CVE-2013-2914", url: "https://bugzilla.suse.com/844084", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-2914", }, { cve: "CVE-2013-2915", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-2915", }, ], notes: [ { category: "general", text: "Google Chrome before 30.0.1599.66 preserves pending NavigationEntry objects in certain invalid circumstances, which allows remote attackers to spoof the address bar via a URL with a malformed scheme, as demonstrated by a nonexistent:12121 URL.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-2915", url: "https://www.suse.com/security/cve/CVE-2013-2915", }, { category: "external", summary: "SUSE Bug 844084 for CVE-2013-2915", url: "https://bugzilla.suse.com/844084", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-2915", }, { cve: "CVE-2013-2916", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-2916", }, ], notes: [ { category: "general", text: "Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to spoof the address bar via vectors involving a response with a 204 (aka No Content) status code, in conjunction with a delay in notifying the user of an attempted spoof.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-2916", url: "https://www.suse.com/security/cve/CVE-2013-2916", }, { category: "external", summary: "SUSE Bug 844084 for CVE-2013-2916", url: "https://bugzilla.suse.com/844084", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-2916", }, { cve: "CVE-2013-2917", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-2917", }, ], notes: [ { category: "general", text: "The ReverbConvolverStage::ReverbConvolverStage function in core/platform/audio/ReverbConvolverStage.cpp in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the impulseResponse array.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-2917", url: "https://www.suse.com/security/cve/CVE-2013-2917", }, { category: "external", summary: "SUSE Bug 844084 for CVE-2013-2917", url: "https://bugzilla.suse.com/844084", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-2917", }, { cve: "CVE-2013-2918", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-2918", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the RenderBlock::collapseAnonymousBlockChild function in core/rendering/RenderBlock.cpp in the DOM implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect handling of parent-child relationships for anonymous blocks.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-2918", url: "https://www.suse.com/security/cve/CVE-2013-2918", }, { category: "external", summary: "SUSE Bug 844084 for CVE-2013-2918", url: "https://bugzilla.suse.com/844084", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-2918", }, { cve: "CVE-2013-2919", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-2919", }, ], notes: [ { category: "general", text: "Google V8, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-2919", url: "https://www.suse.com/security/cve/CVE-2013-2919", }, { category: "external", summary: "SUSE Bug 844084 for CVE-2013-2919", url: "https://bugzilla.suse.com/844084", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-2919", }, { cve: "CVE-2013-2920", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-2920", }, ], notes: [ { category: "general", text: "The DoResolveRelativeHost function in url/url_canon_relative.cc in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service (out-of-bounds read) via a relative URL containing a hostname, as demonstrated by a protocol-relative URL beginning with a //www.google.com/ substring.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-2920", url: "https://www.suse.com/security/cve/CVE-2013-2920", }, { category: "external", summary: "SUSE Bug 844084 for CVE-2013-2920", url: "https://bugzilla.suse.com/844084", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-2920", }, { cve: "CVE-2013-2921", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-2921", }, ], notes: [ { category: "general", text: "Double free vulnerability in the ResourceFetcher::didLoadResource function in core/fetch/ResourceFetcher.cpp in the resource loader in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering certain callback processing during the reporting of a resource entry.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-2921", url: "https://www.suse.com/security/cve/CVE-2013-2921", }, { category: "external", summary: "SUSE Bug 844084 for CVE-2013-2921", url: "https://bugzilla.suse.com/844084", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-2921", }, { cve: "CVE-2013-2922", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-2922", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in core/html/HTMLTemplateElement.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that operates on a TEMPLATE element.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-2922", url: "https://www.suse.com/security/cve/CVE-2013-2922", }, { category: "external", summary: "SUSE Bug 844084 for CVE-2013-2922", url: "https://bugzilla.suse.com/844084", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-2922", }, { cve: "CVE-2013-2923", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-2923", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 30.0.1599.66 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-2923", url: "https://www.suse.com/security/cve/CVE-2013-2923", }, { category: "external", summary: "SUSE Bug 844084 for CVE-2013-2923", url: "https://bugzilla.suse.com/844084", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-2923", }, { cve: "CVE-2013-2924", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-2924", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in International Components for Unicode (ICU), as used in Google Chrome before 30.0.1599.66 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-2924", url: "https://www.suse.com/security/cve/CVE-2013-2924", }, { category: "external", summary: "SUSE Bug 844084 for CVE-2013-2924", url: "https://bugzilla.suse.com/844084", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-2924", }, { cve: "CVE-2013-2925", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-2925", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in core/xml/XMLHttpRequest.cpp in Blink, as used in Google Chrome before 30.0.1599.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger multiple conflicting uses of the same XMLHttpRequest object.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-2925", url: "https://www.suse.com/security/cve/CVE-2013-2925", }, { category: "external", summary: "SUSE Bug 846444 for CVE-2013-2925", url: "https://bugzilla.suse.com/846444", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-2925", }, { cve: "CVE-2013-2926", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-2926", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the IndentOutdentCommand::tryIndentingAsListItem function in core/editing/IndentOutdentCommand.cpp in Blink, as used in Google Chrome before 30.0.1599.101, allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to list elements.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-2926", url: "https://www.suse.com/security/cve/CVE-2013-2926", }, { category: "external", summary: "SUSE Bug 846444 for CVE-2013-2926", url: "https://bugzilla.suse.com/846444", }, { category: "external", summary: "SUSE Bug 871792 for CVE-2013-2926", url: "https://bugzilla.suse.com/871792", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-2926", }, { cve: "CVE-2013-2927", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-2927", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the HTMLFormElement::prepareForSubmission function in core/html/HTMLFormElement.cpp in Blink, as used in Google Chrome before 30.0.1599.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to submission for FORM elements.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-2927", url: "https://www.suse.com/security/cve/CVE-2013-2927", }, { category: "external", summary: "SUSE Bug 846444 for CVE-2013-2927", url: "https://bugzilla.suse.com/846444", }, { category: "external", summary: "SUSE Bug 879607 for CVE-2013-2927", url: "https://bugzilla.suse.com/879607", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-2927", }, { cve: "CVE-2013-2928", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-2928", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 30.0.1599.101 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-2928", url: "https://www.suse.com/security/cve/CVE-2013-2928", }, { category: "external", summary: "SUSE Bug 846444 for CVE-2013-2928", url: "https://bugzilla.suse.com/846444", }, { category: "external", summary: "SUSE Bug 871792 for CVE-2013-2928", url: "https://bugzilla.suse.com/871792", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-2928", }, { cve: "CVE-2013-2931", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-2931", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 31.0.1650.48 allow attackers to execute arbitrary code or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-2931", url: "https://www.suse.com/security/cve/CVE-2013-2931", }, { category: "external", summary: "SUSE Bug 850430 for CVE-2013-2931", url: "https://bugzilla.suse.com/850430", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-2931", }, { cve: "CVE-2013-6621", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6621", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 31.0.1650.48 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the x-webkit-speech attribute in a text INPUT element.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6621", url: "https://www.suse.com/security/cve/CVE-2013-6621", }, { category: "external", summary: "SUSE Bug 850430 for CVE-2013-6621", url: "https://bugzilla.suse.com/850430", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-6621", }, { cve: "CVE-2013-6622", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6622", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the HTMLMediaElement::didMoveToNewDocument function in core/html/HTMLMediaElement.cpp in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving the movement of a media element between documents.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6622", url: "https://www.suse.com/security/cve/CVE-2013-6622", }, { category: "external", summary: "SUSE Bug 850430 for CVE-2013-6622", url: "https://bugzilla.suse.com/850430", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-6622", }, { cve: "CVE-2013-6623", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6623", }, ], notes: [ { category: "general", text: "The SVG implementation in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service (out-of-bounds read) by leveraging the use of tree order, rather than transitive dependency order, for layout.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6623", url: "https://www.suse.com/security/cve/CVE-2013-6623", }, { category: "external", summary: "SUSE Bug 850430 for CVE-2013-6623", url: "https://bugzilla.suse.com/850430", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-6623", }, { cve: "CVE-2013-6624", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6624", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Google Chrome before 31.0.1650.48 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving the string values of id attributes.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6624", url: "https://www.suse.com/security/cve/CVE-2013-6624", }, { category: "external", summary: "SUSE Bug 850430 for CVE-2013-6624", url: "https://bugzilla.suse.com/850430", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-6624", }, { cve: "CVE-2013-6625", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6625", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of DOM range objects in circumstances that require child node removal after a (1) mutation or (2) blur event.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6625", url: "https://www.suse.com/security/cve/CVE-2013-6625", }, { category: "external", summary: "SUSE Bug 850430 for CVE-2013-6625", url: "https://bugzilla.suse.com/850430", }, { category: "external", summary: "SUSE Bug 871792 for CVE-2013-6625", url: "https://bugzilla.suse.com/871792", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-6625", }, { cve: "CVE-2013-6626", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6626", }, ], notes: [ { category: "general", text: "The WebContentsImpl::AttachInterstitialPage function in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 31.0.1650.48 does not cancel JavaScript dialogs upon generating an interstitial warning, which allows remote attackers to spoof the address bar via a crafted web site.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6626", url: "https://www.suse.com/security/cve/CVE-2013-6626", }, { category: "external", summary: "SUSE Bug 850430 for CVE-2013-6626", url: "https://bugzilla.suse.com/850430", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-6626", }, { cve: "CVE-2013-6627", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6627", }, ], notes: [ { category: "general", text: "net/http/http_stream_parser.cc in Google Chrome before 31.0.1650.48 does not properly process HTTP Informational (aka 1xx) status codes, which allows remote web servers to cause a denial of service (out-of-bounds read) via a crafted response.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6627", url: "https://www.suse.com/security/cve/CVE-2013-6627", }, { category: "external", summary: "SUSE Bug 850430 for CVE-2013-6627", url: "https://bugzilla.suse.com/850430", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-6627", }, { cve: "CVE-2013-6628", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6628", }, ], notes: [ { category: "general", text: "net/socket/ssl_client_socket_nss.cc in the TLS implementation in Google Chrome before 31.0.1650.48 does not ensure that a server's X.509 certificate is the same during renegotiation as it was before renegotiation, which might allow remote web servers to interfere with trust relationships by renegotiating a session.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6628", url: "https://www.suse.com/security/cve/CVE-2013-6628", }, { category: "external", summary: "SUSE Bug 850430 for CVE-2013-6628", url: "https://bugzilla.suse.com/850430", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-6628", }, { cve: "CVE-2013-6629", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6629", }, ], notes: [ { category: "general", text: "The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6629", url: "https://www.suse.com/security/cve/CVE-2013-6629", }, { category: "external", summary: "SUSE Bug 850430 for CVE-2013-6629", url: "https://bugzilla.suse.com/850430", }, { category: "external", summary: "SUSE Bug 873872 for CVE-2013-6629", url: "https://bugzilla.suse.com/873872", }, { category: "external", summary: "SUSE Bug 873873 for CVE-2013-6629", url: "https://bugzilla.suse.com/873873", }, { category: "external", summary: "SUSE Bug 877429 for CVE-2013-6629", url: "https://bugzilla.suse.com/877429", }, { category: "external", summary: "SUSE Bug 877430 for CVE-2013-6629", url: "https://bugzilla.suse.com/877430", }, { category: "external", summary: "SUSE Bug 880246 for CVE-2013-6629", url: "https://bugzilla.suse.com/880246", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-6629", }, { cve: "CVE-2013-6630", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6630", }, ], notes: [ { category: "general", text: "The get_dht function in jdmarker.c in libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48 and other products, does not set all elements of a certain Huffman value array during the reading of segments that follow Define Huffman Table (DHT) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6630", url: "https://www.suse.com/security/cve/CVE-2013-6630", }, { category: "external", summary: "SUSE Bug 850430 for CVE-2013-6630", url: "https://bugzilla.suse.com/850430", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-6630", }, { cve: "CVE-2013-6631", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6631", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the Channel::SendRTCPPacket function in voice_engine/channel.cc in libjingle in WebRTC, as used in Google Chrome before 31.0.1650.48 and other products, allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via vectors that trigger the absence of certain statistics initialization, leading to the skipping of a required DeRegisterExternalTransport call.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6631", url: "https://www.suse.com/security/cve/CVE-2013-6631", }, { category: "external", summary: "SUSE Bug 850430 for CVE-2013-6631", url: "https://bugzilla.suse.com/850430", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-6631", }, { cve: "CVE-2013-6632", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6632", }, ], notes: [ { category: "general", text: "Integer overflow in Google Chrome before 31.0.1650.57 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as demonstrated during a Mobile Pwn2Own competition at PacSec 2013.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6632", url: "https://www.suse.com/security/cve/CVE-2013-6632", }, { category: "external", summary: "SUSE Bug 850430 for CVE-2013-6632", url: "https://bugzilla.suse.com/850430", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2013-6632", }, { cve: "CVE-2013-6634", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6634", }, ], notes: [ { category: "general", text: "The OneClickSigninHelper::ShowInfoBarIfPossible function in browser/ui/sync/one_click_signin_helper.cc in Google Chrome before 31.0.1650.63 uses an incorrect URL during realm validation, which allows remote attackers to conduct session fixation attacks and hijack web sessions by triggering improper sync after a 302 (aka Found) HTTP status code.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6634", url: "https://www.suse.com/security/cve/CVE-2013-6634", }, { category: "external", summary: "SUSE Bug 854472 for CVE-2013-6634", url: "https://bugzilla.suse.com/854472", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-6634", }, { cve: "CVE-2013-6635", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6635", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the editing implementation in Blink, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via JavaScript code that triggers removal of a node during processing of the DOM tree, related to CompositeEditCommand.cpp and ReplaceSelectionCommand.cpp.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6635", url: "https://www.suse.com/security/cve/CVE-2013-6635", }, { category: "external", summary: "SUSE Bug 854472 for CVE-2013-6635", url: "https://bugzilla.suse.com/854472", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-6635", }, { cve: "CVE-2013-6636", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6636", }, ], notes: [ { category: "general", text: "The FrameLoader::notifyIfInitialDocumentAccessed function in core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 31.0.1650.63, makes an incorrect check for an empty document during presentation of a modal dialog, which allows remote attackers to spoof the address bar via vectors involving the document.write method.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6636", url: "https://www.suse.com/security/cve/CVE-2013-6636", }, { category: "external", summary: "SUSE Bug 854472 for CVE-2013-6636", url: "https://bugzilla.suse.com/854472", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-6636", }, { cve: "CVE-2013-6637", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6637", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 31.0.1650.63 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6637", url: "https://www.suse.com/security/cve/CVE-2013-6637", }, { category: "external", summary: "SUSE Bug 854472 for CVE-2013-6637", url: "https://bugzilla.suse.com/854472", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-6637", }, { cve: "CVE-2013-6638", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6638", }, ], notes: [ { category: "general", text: "Multiple buffer overflows in runtime.cc in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a large typed array, related to the (1) Runtime_TypedArrayInitialize and (2) Runtime_TypedArrayInitializeFromArrayLike functions.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6638", url: "https://www.suse.com/security/cve/CVE-2013-6638", }, { category: "external", summary: "SUSE Bug 854473 for CVE-2013-6638", url: "https://bugzilla.suse.com/854473", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-6638", }, { cve: "CVE-2013-6639", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6639", }, ], notes: [ { category: "general", text: "The DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via JavaScript code that sets the value of an array element with a crafted index.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6639", url: "https://www.suse.com/security/cve/CVE-2013-6639", }, { category: "external", summary: "SUSE Bug 854473 for CVE-2013-6639", url: "https://bugzilla.suse.com/854473", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-6639", }, { cve: "CVE-2013-6640", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6640", }, ], notes: [ { category: "general", text: "The DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service (out-of-bounds read) via JavaScript code that sets a variable to the value of an array element with a crafted index.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6640", url: "https://www.suse.com/security/cve/CVE-2013-6640", }, { category: "external", summary: "SUSE Bug 854473 for CVE-2013-6640", url: "https://bugzilla.suse.com/854473", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-6640", }, { cve: "CVE-2013-6641", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6641", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the FormAssociatedElement::formRemovedFromTree function in core/html/FormAssociatedElement.cpp in Blink, as used in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of the past names map of a FORM element.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6641", url: "https://www.suse.com/security/cve/CVE-2013-6641", }, { category: "external", summary: "SUSE Bug 861013 for CVE-2013-6641", url: "https://bugzilla.suse.com/861013", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-6641", }, { cve: "CVE-2013-6643", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6643", }, ], notes: [ { category: "general", text: "The OneClickSigninBubbleView::WindowClosing function in browser/ui/views/sync/one_click_signin_bubble_view.cc in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows attackers to trigger a sync with an arbitrary Google account by leveraging improper handling of the closing of an untrusted signin confirm dialog.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6643", url: "https://www.suse.com/security/cve/CVE-2013-6643", }, { category: "external", summary: "SUSE Bug 861013 for CVE-2013-6643", url: "https://bugzilla.suse.com/861013", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-6643", }, { cve: "CVE-2013-6644", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6644", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6644", url: "https://www.suse.com/security/cve/CVE-2013-6644", }, { category: "external", summary: "SUSE Bug 861013 for CVE-2013-6644", url: "https://bugzilla.suse.com/861013", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-6644", }, { cve: "CVE-2013-6645", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6645", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the OnWindowRemovingFromRootWindow function in content/browser/web_contents/web_contents_view_aura.cc in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving certain print-preview and tab-switch actions that interact with a speech input element.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6645", url: "https://www.suse.com/security/cve/CVE-2013-6645", }, { category: "external", summary: "SUSE Bug 861013 for CVE-2013-6645", url: "https://bugzilla.suse.com/861013", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-6645", }, { cve: "CVE-2013-6646", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6646", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the Web Workers implementation in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the shutting down of a worker process.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6646", url: "https://www.suse.com/security/cve/CVE-2013-6646", }, { category: "external", summary: "SUSE Bug 861013 for CVE-2013-6646", url: "https://bugzilla.suse.com/861013", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-6646", }, { cve: "CVE-2013-6649", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6649", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a zero-size SVG image.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6649", url: "https://www.suse.com/security/cve/CVE-2013-6649", }, { category: "external", summary: "SUSE Bug 861013 for CVE-2013-6649", url: "https://bugzilla.suse.com/861013", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-6649", }, { cve: "CVE-2013-6650", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6650", }, ], notes: [ { category: "general", text: "The StoreBuffer::ExemptPopularPages function in store-buffer.cc in Google V8 before 3.22.24.16, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors that trigger incorrect handling of \"popular pages.\"", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6650", url: "https://www.suse.com/security/cve/CVE-2013-6650", }, { category: "external", summary: "SUSE Bug 861013 for CVE-2013-6650", url: "https://bugzilla.suse.com/861013", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-6650", }, { cve: "CVE-2013-6653", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6653", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the web contents implementation in Google Chrome before 33.0.1750.117 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving attempted conflicting access to the color chooser.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6653", url: "https://www.suse.com/security/cve/CVE-2013-6653", }, { category: "external", summary: "SUSE Bug 865500 for CVE-2013-6653", url: "https://bugzilla.suse.com/865500", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-6653", }, { cve: "CVE-2013-6654", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6654", }, ], notes: [ { category: "general", text: "The SVGAnimateElement::calculateAnimatedValue function in core/svg/SVGAnimateElement.cpp in Blink, as used in Google Chrome before 33.0.1750.117, does not properly handle unexpected data types, which allows remote attackers to cause a denial of service (incorrect cast) or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6654", url: "https://www.suse.com/security/cve/CVE-2013-6654", }, { category: "external", summary: "SUSE Bug 865500 for CVE-2013-6654", url: "https://bugzilla.suse.com/865500", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-6654", }, { cve: "CVE-2013-6655", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6655", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Blink, as used in Google Chrome before 33.0.1750.117, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper handling of overflowchanged DOM events during interaction between JavaScript and layout.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6655", url: "https://www.suse.com/security/cve/CVE-2013-6655", }, { category: "external", summary: "SUSE Bug 865500 for CVE-2013-6655", url: "https://bugzilla.suse.com/865500", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-6655", }, { cve: "CVE-2013-6656", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6656", }, ], notes: [ { category: "general", text: "The XSSAuditor::init function in core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117, processes POST requests by using the body of a redirecting page instead of the body of a redirect target, which allows remote attackers to obtain sensitive information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6656", url: "https://www.suse.com/security/cve/CVE-2013-6656", }, { category: "external", summary: "SUSE Bug 865500 for CVE-2013-6656", url: "https://bugzilla.suse.com/865500", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-6656", }, { cve: "CVE-2013-6657", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6657", }, ], notes: [ { category: "general", text: "core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117, inserts the about:blank URL during certain blocking of FORM elements within HTTP requests, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6657", url: "https://www.suse.com/security/cve/CVE-2013-6657", }, { category: "external", summary: "SUSE Bug 865500 for CVE-2013-6657", url: "https://bugzilla.suse.com/865500", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-6657", }, { cve: "CVE-2013-6658", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6658", }, ], notes: [ { category: "general", text: "Multiple use-after-free vulnerabilities in the layout implementation in Blink, as used in Google Chrome before 33.0.1750.117, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving (1) running JavaScript code during execution of the updateWidgetPositions function or (2) making a call into a plugin during execution of the updateWidgetPositions function.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6658", url: "https://www.suse.com/security/cve/CVE-2013-6658", }, { category: "external", summary: "SUSE Bug 865500 for CVE-2013-6658", url: "https://bugzilla.suse.com/865500", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2013-6658", }, { cve: "CVE-2013-6659", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6659", }, ], notes: [ { category: "general", text: "The SSLClientSocketNSS::Core::OwnAuthCertHandler function in net/socket/ssl_client_socket_nss.cc in Google Chrome before 33.0.1750.117 does not prevent changes to server X.509 certificates during renegotiations, which allows remote SSL servers to trigger use of a new certificate chain, inconsistent with the user's expectations, by initiating a TLS renegotiation.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6659", url: "https://www.suse.com/security/cve/CVE-2013-6659", }, { category: "external", summary: "SUSE Bug 865500 for CVE-2013-6659", url: "https://bugzilla.suse.com/865500", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-6659", }, { cve: "CVE-2013-6660", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6660", }, ], notes: [ { category: "general", text: "The drag-and-drop implementation in Google Chrome before 33.0.1750.117 does not properly restrict the information in WebDropData data structures, which allows remote attackers to discover full pathnames via a crafted web site.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6660", url: "https://www.suse.com/security/cve/CVE-2013-6660", }, { category: "external", summary: "SUSE Bug 865500 for CVE-2013-6660", url: "https://bugzilla.suse.com/865500", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-6660", }, { cve: "CVE-2013-6661", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2013-6661", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 33.0.1750.117 allow attackers to bypass the sandbox protection mechanism after obtaining renderer access, or have other impact, via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2013-6661", url: "https://www.suse.com/security/cve/CVE-2013-6661", }, { category: "external", summary: "SUSE Bug 865500 for CVE-2013-6661", url: "https://bugzilla.suse.com/865500", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2013-6661", }, { cve: "CVE-2014-0574", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-0574", }, ], notes: [ { category: "general", text: "Double free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-0574", url: "https://www.suse.com/security/cve/CVE-2014-0574", }, { category: "external", summary: "SUSE Bug 905032 for CVE-2014-0574", url: "https://bugzilla.suse.com/905032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2014-0574", }, { cve: "CVE-2014-1700", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1700", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in modules/speech/SpeechSynthesis.cpp in Blink, as used in Google Chrome before 33.0.1750.149, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of a certain utterance data structure.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1700", url: "https://www.suse.com/security/cve/CVE-2014-1700", }, { category: "external", summary: "SUSE Bug 866959 for CVE-2014-1700", url: "https://bugzilla.suse.com/866959", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1700", }, { cve: "CVE-2014-1701", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1701", }, ], notes: [ { category: "general", text: "The GenerateFunction function in bindings/scripts/code_generator_v8.pm in Blink, as used in Google Chrome before 33.0.1750.149, does not implement a certain cross-origin restriction for the EventTarget::dispatchEvent function, which allows remote attackers to conduct Universal XSS (UXSS) attacks via vectors involving events.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1701", url: "https://www.suse.com/security/cve/CVE-2014-1701", }, { category: "external", summary: "SUSE Bug 866959 for CVE-2014-1701", url: "https://bugzilla.suse.com/866959", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2014-1701", }, { cve: "CVE-2014-1702", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1702", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the DatabaseThread::cleanupDatabaseThread function in modules/webdatabase/DatabaseThread.cpp in the web database implementation in Blink, as used in Google Chrome before 33.0.1750.149, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of scheduled tasks during shutdown of a thread.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1702", url: "https://www.suse.com/security/cve/CVE-2014-1702", }, { category: "external", summary: "SUSE Bug 866959 for CVE-2014-1702", url: "https://bugzilla.suse.com/866959", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1702", }, { cve: "CVE-2014-1703", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1703", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the WebSocketDispatcherHost::SendOrDrop function in content/browser/renderer_host/websocket_dispatcher_host.cc in the Web Sockets implementation in Google Chrome before 33.0.1750.149 might allow remote attackers to bypass the sandbox protection mechanism by leveraging an incorrect deletion in a certain failure case.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1703", url: "https://www.suse.com/security/cve/CVE-2014-1703", }, { category: "external", summary: "SUSE Bug 866959 for CVE-2014-1703", url: "https://bugzilla.suse.com/866959", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1703", }, { cve: "CVE-2014-1704", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1704", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google V8 before 3.23.17.18, as used in Google Chrome before 33.0.1750.149, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1704", url: "https://www.suse.com/security/cve/CVE-2014-1704", }, { category: "external", summary: "SUSE Bug 866959 for CVE-2014-1704", url: "https://bugzilla.suse.com/866959", }, { category: "external", summary: "SUSE Bug 868707 for CVE-2014-1704", url: "https://bugzilla.suse.com/868707", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2014-1704", }, { cve: "CVE-2014-1705", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1705", }, ], notes: [ { category: "general", text: "Google V8, as used in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1705", url: "https://www.suse.com/security/cve/CVE-2014-1705", }, { category: "external", summary: "SUSE Bug 866959 for CVE-2014-1705", url: "https://bugzilla.suse.com/866959", }, { category: "external", summary: "SUSE Bug 868707 for CVE-2014-1705", url: "https://bugzilla.suse.com/868707", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2014-1705", }, { cve: "CVE-2014-1713", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1713", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the AttributeSetter function in bindings/templates/attributes.cpp in the bindings in Blink, as used in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving the document.location value.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1713", url: "https://www.suse.com/security/cve/CVE-2014-1713", }, { category: "external", summary: "SUSE Bug 866959 for CVE-2014-1713", url: "https://bugzilla.suse.com/866959", }, { category: "external", summary: "SUSE Bug 871792 for CVE-2014-1713", url: "https://bugzilla.suse.com/871792", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1713", }, { cve: "CVE-2014-1714", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1714", }, ], notes: [ { category: "general", text: "The ScopedClipboardWriter::WritePickledData function in ui/base/clipboard/scoped_clipboard_writer.cc in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows does not verify a certain format value, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the clipboard.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1714", url: "https://www.suse.com/security/cve/CVE-2014-1714", }, { category: "external", summary: "SUSE Bug 866959 for CVE-2014-1714", url: "https://bugzilla.suse.com/866959", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1714", }, { cve: "CVE-2014-1715", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1715", }, ], notes: [ { category: "general", text: "Directory traversal vulnerability in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows has unspecified impact and attack vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1715", url: "https://www.suse.com/security/cve/CVE-2014-1715", }, { category: "external", summary: "SUSE Bug 866959 for CVE-2014-1715", url: "https://bugzilla.suse.com/866959", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1715", }, { cve: "CVE-2014-1716", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1716", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in the Runtime_SetPrototype function in runtime.cc in Google V8, as used in Google Chrome before 34.0.1847.116, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka \"Universal XSS (UXSS).\"", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1716", url: "https://www.suse.com/security/cve/CVE-2014-1716", }, { category: "external", summary: "SUSE Bug 872805 for CVE-2014-1716", url: "https://bugzilla.suse.com/872805", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1716", }, { cve: "CVE-2014-1717", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1717", }, ], notes: [ { category: "general", text: "Google V8, as used in Google Chrome before 34.0.1847.116, does not properly use numeric casts during handling of typed arrays, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JavaScript code.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1717", url: "https://www.suse.com/security/cve/CVE-2014-1717", }, { category: "external", summary: "SUSE Bug 872805 for CVE-2014-1717", url: "https://bugzilla.suse.com/872805", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1717", }, { cve: "CVE-2014-1718", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1718", }, ], notes: [ { category: "general", text: "Integer overflow in the SoftwareFrameManager::SwapToNewFrame function in content/browser/renderer_host/software_frame_manager.cc in the software compositor in Google Chrome before 34.0.1847.116 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted mapping of a large amount of renderer memory.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1718", url: "https://www.suse.com/security/cve/CVE-2014-1718", }, { category: "external", summary: "SUSE Bug 872805 for CVE-2014-1718", url: "https://bugzilla.suse.com/872805", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1718", }, { cve: "CVE-2014-1719", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1719", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the WebSharedWorkerStub::OnTerminateWorkerContext function in content/worker/websharedworker_stub.cc in the Web Workers implementation in Google Chrome before 34.0.1847.116 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via vectors that trigger a SharedWorker termination during script loading.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1719", url: "https://www.suse.com/security/cve/CVE-2014-1719", }, { category: "external", summary: "SUSE Bug 872805 for CVE-2014-1719", url: "https://bugzilla.suse.com/872805", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1719", }, { cve: "CVE-2014-1720", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1720", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the HTMLBodyElement::insertedInto function in core/html/HTMLBodyElement.cpp in Blink, as used in Google Chrome before 34.0.1847.116, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving attributes.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1720", url: "https://www.suse.com/security/cve/CVE-2014-1720", }, { category: "external", summary: "SUSE Bug 872805 for CVE-2014-1720", url: "https://bugzilla.suse.com/872805", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1720", }, { cve: "CVE-2014-1721", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1721", }, ], notes: [ { category: "general", text: "Google V8, as used in Google Chrome before 34.0.1847.116, does not properly implement lazy deoptimization, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code, as demonstrated by improper handling of a heap allocation of a number outside the Small Integer (aka smi) range.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1721", url: "https://www.suse.com/security/cve/CVE-2014-1721", }, { category: "external", summary: "SUSE Bug 872805 for CVE-2014-1721", url: "https://bugzilla.suse.com/872805", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1721", }, { cve: "CVE-2014-1722", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1722", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the RenderBlock::addChildIgnoringAnonymousColumnBlocks function in core/rendering/RenderBlock.cpp in Blink, as used in Google Chrome before 34.0.1847.116, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving addition of a child node.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1722", url: "https://www.suse.com/security/cve/CVE-2014-1722", }, { category: "external", summary: "SUSE Bug 872805 for CVE-2014-1722", url: "https://bugzilla.suse.com/872805", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1722", }, { cve: "CVE-2014-1723", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1723", }, ], notes: [ { category: "general", text: "The UnescapeURLWithOffsetsImpl function in net/base/escape.cc in Google Chrome before 34.0.1847.116 does not properly handle bidirectional Internationalized Resource Identifiers (IRIs), which makes it easier for remote attackers to spoof URLs via crafted use of right-to-left (RTL) Unicode text.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1723", url: "https://www.suse.com/security/cve/CVE-2014-1723", }, { category: "external", summary: "SUSE Bug 872805 for CVE-2014-1723", url: "https://bugzilla.suse.com/872805", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1723", }, { cve: "CVE-2014-1724", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1724", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Free(b)soft Laboratory Speech Dispatcher 0.7.1, as used in Google Chrome before 34.0.1847.116, allows remote attackers to cause a denial of service (application hang) or possibly have unspecified other impact via a text-to-speech request.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1724", url: "https://www.suse.com/security/cve/CVE-2014-1724", }, { category: "external", summary: "SUSE Bug 872805 for CVE-2014-1724", url: "https://bugzilla.suse.com/872805", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1724", }, { cve: "CVE-2014-1725", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1725", }, ], notes: [ { category: "general", text: "The base64DecodeInternal function in wtf/text/Base64.cpp in Blink, as used in Google Chrome before 34.0.1847.116, does not properly handle string data composed exclusively of whitespace characters, which allows remote attackers to cause a denial of service (out-of-bounds read) via a window.atob method call.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1725", url: "https://www.suse.com/security/cve/CVE-2014-1725", }, { category: "external", summary: "SUSE Bug 872805 for CVE-2014-1725", url: "https://bugzilla.suse.com/872805", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2014-1725", }, { cve: "CVE-2014-1726", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1726", }, ], notes: [ { category: "general", text: "The drag implementation in Google Chrome before 34.0.1847.116 allows user-assisted remote attackers to bypass the Same Origin Policy and forge local pathnames by leveraging renderer access.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1726", url: "https://www.suse.com/security/cve/CVE-2014-1726", }, { category: "external", summary: "SUSE Bug 872805 for CVE-2014-1726", url: "https://bugzilla.suse.com/872805", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2014-1726", }, { cve: "CVE-2014-1727", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1727", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in content/renderer/renderer_webcolorchooser_impl.h in Google Chrome before 34.0.1847.116 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to forms.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1727", url: "https://www.suse.com/security/cve/CVE-2014-1727", }, { category: "external", summary: "SUSE Bug 872805 for CVE-2014-1727", url: "https://bugzilla.suse.com/872805", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1727", }, { cve: "CVE-2014-1728", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1728", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 34.0.1847.116 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1728", url: "https://www.suse.com/security/cve/CVE-2014-1728", }, { category: "external", summary: "SUSE Bug 872805 for CVE-2014-1728", url: "https://bugzilla.suse.com/872805", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1728", }, { cve: "CVE-2014-1729", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1729", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google V8 before 3.24.35.22, as used in Google Chrome before 34.0.1847.116, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1729", url: "https://www.suse.com/security/cve/CVE-2014-1729", }, { category: "external", summary: "SUSE Bug 872805 for CVE-2014-1729", url: "https://bugzilla.suse.com/872805", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1729", }, { cve: "CVE-2014-1730", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1730", }, ], notes: [ { category: "general", text: "Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly store internationalization metadata, which allows remote attackers to bypass intended access restrictions by leveraging \"type confusion\" and reading property values, related to i18n.js and runtime.cc.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1730", url: "https://www.suse.com/security/cve/CVE-2014-1730", }, { category: "external", summary: "SUSE Bug 875408 for CVE-2014-1730", url: "https://bugzilla.suse.com/875408", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1730", }, { cve: "CVE-2014-1731", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1731", }, ], notes: [ { category: "general", text: "core/html/HTMLSelectElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly check renderer state upon a focus event, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage \"type confusion\" for SELECT elements.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1731", url: "https://www.suse.com/security/cve/CVE-2014-1731", }, { category: "external", summary: "SUSE Bug 875408 for CVE-2014-1731", url: "https://bugzilla.suse.com/875408", }, { category: "external", summary: "SUSE Bug 879607 for CVE-2014-1731", url: "https://bugzilla.suse.com/879607", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1731", }, { cve: "CVE-2014-1732", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1732", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in browser/ui/views/speech_recognition_bubble_views.cc in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact via an INPUT element that triggers the presence of a Speech Recognition Bubble window for an incorrect duration.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1732", url: "https://www.suse.com/security/cve/CVE-2014-1732", }, { category: "external", summary: "SUSE Bug 875408 for CVE-2014-1732", url: "https://bugzilla.suse.com/875408", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1732", }, { cve: "CVE-2014-1733", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1733", }, ], notes: [ { category: "general", text: "The PointerCompare function in codegen.cc in Seccomp-BPF, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly merge blocks, which might allow remote attackers to bypass intended sandbox restrictions by leveraging renderer access.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1733", url: "https://www.suse.com/security/cve/CVE-2014-1733", }, { category: "external", summary: "SUSE Bug 875408 for CVE-2014-1733", url: "https://bugzilla.suse.com/875408", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1733", }, { cve: "CVE-2014-1734", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1734", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1734", url: "https://www.suse.com/security/cve/CVE-2014-1734", }, { category: "external", summary: "SUSE Bug 875408 for CVE-2014-1734", url: "https://bugzilla.suse.com/875408", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1734", }, { cve: "CVE-2014-1735", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1735", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google V8 before 3.24.35.33, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1735", url: "https://www.suse.com/security/cve/CVE-2014-1735", }, { category: "external", summary: "SUSE Bug 875408 for CVE-2014-1735", url: "https://bugzilla.suse.com/875408", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1735", }, { cve: "CVE-2014-1740", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1740", }, ], notes: [ { category: "general", text: "Multiple use-after-free vulnerabilities in net/websockets/websocket_job.cc in the WebSockets implementation in Google Chrome before 34.0.1847.137 allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to WebSocketJob deletion.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1740", url: "https://www.suse.com/security/cve/CVE-2014-1740", }, { category: "external", summary: "SUSE Bug 877768 for CVE-2014-1740", url: "https://bugzilla.suse.com/877768", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1740", }, { cve: "CVE-2014-1741", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1741", }, ], notes: [ { category: "general", text: "Multiple integer overflows in the replace-data functionality in the CharacterData interface implementation in core/dom/CharacterData.cpp in Blink, as used in Google Chrome before 34.0.1847.137, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to ranges.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1741", url: "https://www.suse.com/security/cve/CVE-2014-1741", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1741", }, { cve: "CVE-2014-1742", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1742", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the FrameSelection::updateAppearance function in core/editing/FrameSelection.cpp in Blink, as used in Google Chrome before 34.0.1847.137, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper RenderObject handling.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1742", url: "https://www.suse.com/security/cve/CVE-2014-1742", }, { category: "external", summary: "SUSE Bug 877768 for CVE-2014-1742", url: "https://bugzilla.suse.com/877768", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1742", }, { cve: "CVE-2014-1743", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1743", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the StyleElement::removedFromDocument function in core/dom/StyleElement.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code that triggers tree mutation.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1743", url: "https://www.suse.com/security/cve/CVE-2014-1743", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1743", }, { cve: "CVE-2014-1744", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1744", }, ], notes: [ { category: "general", text: "Integer overflow in the AudioInputRendererHost::OnCreateStream function in content/browser/renderer_host/media/audio_input_renderer_host.cc in Google Chrome before 35.0.1916.114 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a large shared-memory allocation.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1744", url: "https://www.suse.com/security/cve/CVE-2014-1744", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1744", }, { cve: "CVE-2014-1745", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1745", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to core/svg/SVGFontFaceElement.cpp.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1745", url: "https://www.suse.com/security/cve/CVE-2014-1745", }, { category: "external", summary: "SUSE Bug 1219604 for CVE-2014-1745", url: "https://bugzilla.suse.com/1219604", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1745", }, { cve: "CVE-2014-1746", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1746", }, ], notes: [ { category: "general", text: "The InMemoryUrlProtocol::Read function in media/filters/in_memory_url_protocol.cc in Google Chrome before 35.0.1916.114 relies on an insufficiently large integer data type, which allows remote attackers to cause a denial of service (out-of-bounds read) via vectors that trigger use of a large buffer.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1746", url: "https://www.suse.com/security/cve/CVE-2014-1746", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2014-1746", }, { cve: "CVE-2014-1747", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1747", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in the DocumentLoader::maybeCreateArchive function in core/loader/DocumentLoader.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to inject arbitrary web script or HTML via crafted MHTML content, aka \"Universal XSS (UXSS).\"", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1747", url: "https://www.suse.com/security/cve/CVE-2014-1747", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2014-1747", }, { cve: "CVE-2014-1748", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1748", }, ], notes: [ { category: "general", text: "The ScrollView::paint function in platform/scroll/ScrollView.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to spoof the UI by extending scrollbar painting into the parent frame.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1748", url: "https://www.suse.com/security/cve/CVE-2014-1748", }, { category: "external", summary: "SUSE Bug 909707 for CVE-2014-1748", url: "https://bugzilla.suse.com/909707", }, { category: "external", summary: "SUSE Bug 971460 for CVE-2014-1748", url: "https://bugzilla.suse.com/971460", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2014-1748", }, { cve: "CVE-2014-1749", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-1749", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 35.0.1916.114 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-1749", url: "https://www.suse.com/security/cve/CVE-2014-1749", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-1749", }, { cve: "CVE-2014-3152", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3152", }, ], notes: [ { category: "general", text: "Integer underflow in the LCodeGen::PrepareKeyedOperand function in arm/lithium-codegen-arm.cc in Google V8 before 3.25.28.16, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a negative key value.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3152", url: "https://www.suse.com/security/cve/CVE-2014-3152", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2014-3152", }, { cve: "CVE-2014-3154", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3154", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the ChildThread::Shutdown function in content/child/child_thread.cc in the filesystem API in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to a Blink shutdown.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3154", url: "https://www.suse.com/security/cve/CVE-2014-3154", }, { category: "external", summary: "SUSE Bug 882267 for CVE-2014-3154", url: "https://bugzilla.suse.com/882267", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-3154", }, { cve: "CVE-2014-3155", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3155", }, ], notes: [ { category: "general", text: "net/spdy/spdy_write_queue.cc in the SPDY implementation in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service (out-of-bounds read) by leveraging incorrect queue maintenance.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3155", url: "https://www.suse.com/security/cve/CVE-2014-3155", }, { category: "external", summary: "SUSE Bug 882263 for CVE-2014-3155", url: "https://bugzilla.suse.com/882263", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2014-3155", }, { cve: "CVE-2014-3156", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3156", }, ], notes: [ { category: "general", text: "Buffer overflow in the clipboard implementation in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger unexpected bitmap data, related to content/renderer/renderer_clipboard_client.cc and content/renderer/webclipboard_impl.cc.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3156", url: "https://www.suse.com/security/cve/CVE-2014-3156", }, { category: "external", summary: "SUSE Bug 882264 for CVE-2014-3156", url: "https://bugzilla.suse.com/882264", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-3156", }, { cve: "CVE-2014-3157", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3157", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in the FFmpegVideoDecoder::GetVideoBuffer function in media/filters/ffmpeg_video_decoder.cc in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging VideoFrame data structures that are too small for proper interaction with an underlying FFmpeg library.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3157", url: "https://www.suse.com/security/cve/CVE-2014-3157", }, { category: "external", summary: "SUSE Bug 882265 for CVE-2014-3157", url: "https://bugzilla.suse.com/882265", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-3157", }, { cve: "CVE-2014-3160", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3160", }, ], notes: [ { category: "general", text: "The ResourceFetcher::canRequest function in core/fetch/ResourceFetcher.cpp in Blink, as used in Google Chrome before 36.0.1985.125, does not properly restrict subresource requests associated with SVG files, which allows remote attackers to bypass the Same Origin Policy via a crafted file.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3160", url: "https://www.suse.com/security/cve/CVE-2014-3160", }, { category: "external", summary: "SUSE Bug 887952 for CVE-2014-3160", url: "https://bugzilla.suse.com/887952", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2014-3160", }, { cve: "CVE-2014-3162", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3162", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 36.0.1985.125 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3162", url: "https://www.suse.com/security/cve/CVE-2014-3162", }, { category: "external", summary: "SUSE Bug 887955 for CVE-2014-3162", url: "https://bugzilla.suse.com/887955", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2014-3162", }, { cve: "CVE-2014-3165", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3165", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in modules/websockets/WorkerThreadableWebSocketChannel.cpp in the Web Sockets implementation in Blink, as used in Google Chrome before 36.0.1985.143, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an unexpectedly long lifetime of a temporary object during method completion.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3165", url: "https://www.suse.com/security/cve/CVE-2014-3165", }, { category: "external", summary: "SUSE Bug 891717 for CVE-2014-3165", url: "https://bugzilla.suse.com/891717", }, { category: "external", summary: "SUSE Bug 891772 for CVE-2014-3165", url: "https://bugzilla.suse.com/891772", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-3165", }, { cve: "CVE-2014-3166", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3166", }, ], notes: [ { category: "general", text: "The Public Key Pinning (PKP) implementation in Google Chrome before 36.0.1985.143 on Windows, OS X, and Linux, and before 36.0.1985.135 on Android, does not correctly consider the properties of SPDY connections, which allows remote attackers to obtain sensitive information by leveraging the use of multiple domain names.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3166", url: "https://www.suse.com/security/cve/CVE-2014-3166", }, { category: "external", summary: "SUSE Bug 891717 for CVE-2014-3166", url: "https://bugzilla.suse.com/891717", }, { category: "external", summary: "SUSE Bug 891772 for CVE-2014-3166", url: "https://bugzilla.suse.com/891772", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-3166", }, { cve: "CVE-2014-3167", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3167", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 36.0.1985.143 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3167", url: "https://www.suse.com/security/cve/CVE-2014-3167", }, { category: "external", summary: "SUSE Bug 891717 for CVE-2014-3167", url: "https://bugzilla.suse.com/891717", }, { category: "external", summary: "SUSE Bug 891772 for CVE-2014-3167", url: "https://bugzilla.suse.com/891772", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-3167", }, { cve: "CVE-2014-3168", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3168", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper caching associated with animation.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3168", url: "https://www.suse.com/security/cve/CVE-2014-3168", }, { category: "external", summary: "SUSE Bug 893720 for CVE-2014-3168", url: "https://bugzilla.suse.com/893720", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-3168", }, { cve: "CVE-2014-3169", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3169", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in core/dom/ContainerNode.cpp in the DOM implementation in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging script execution that occurs before notification of node removal.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3169", url: "https://www.suse.com/security/cve/CVE-2014-3169", }, { category: "external", summary: "SUSE Bug 893720 for CVE-2014-3169", url: "https://bugzilla.suse.com/893720", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-3169", }, { cve: "CVE-2014-3170", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3170", }, ], notes: [ { category: "general", text: "extensions/common/url_pattern.cc in Google Chrome before 37.0.2062.94 does not prevent use of a '\\0' character in a host name, which allows remote attackers to spoof the extension permission dialog by relying on truncation after this character.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3170", url: "https://www.suse.com/security/cve/CVE-2014-3170", }, { category: "external", summary: "SUSE Bug 893720 for CVE-2014-3170", url: "https://bugzilla.suse.com/893720", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2014-3170", }, { cve: "CVE-2014-3171", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3171", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the V8 bindings in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper use of HashMap add operations instead of HashMap set operations, related to bindings/core/v8/DOMWrapperMap.h and bindings/core/v8/SerializedScriptValue.cpp.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3171", url: "https://www.suse.com/security/cve/CVE-2014-3171", }, { category: "external", summary: "SUSE Bug 893720 for CVE-2014-3171", url: "https://bugzilla.suse.com/893720", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-3171", }, { cve: "CVE-2014-3172", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3172", }, ], notes: [ { category: "general", text: "The Debugger extension API in browser/extensions/api/debugger/debugger_api.cc in Google Chrome before 37.0.2062.94 does not validate a tab's URL before an attach operation, which allows remote attackers to bypass intended access limitations via an extension that uses a restricted URL, as demonstrated by a chrome:// URL.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3172", url: "https://www.suse.com/security/cve/CVE-2014-3172", }, { category: "external", summary: "SUSE Bug 893720 for CVE-2014-3172", url: "https://bugzilla.suse.com/893720", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2014-3172", }, { cve: "CVE-2014-3173", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3173", }, ], notes: [ { category: "general", text: "The WebGL implementation in Google Chrome before 37.0.2062.94 does not ensure that clear calls interact properly with the state of a draw buffer, which allows remote attackers to cause a denial of service (read of uninitialized memory) via a crafted CANVAS element, related to gpu/command_buffer/service/framebuffer_manager.cc and gpu/command_buffer/service/gles2_cmd_decoder.cc.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3173", url: "https://www.suse.com/security/cve/CVE-2014-3173", }, { category: "external", summary: "SUSE Bug 893720 for CVE-2014-3173", url: "https://bugzilla.suse.com/893720", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2014-3173", }, { cve: "CVE-2014-3174", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3174", }, ], notes: [ { category: "general", text: "modules/webaudio/BiquadDSPKernel.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 37.0.2062.94, does not properly consider concurrent threads during attempts to update biquad filter coefficients, which allows remote attackers to cause a denial of service (read of uninitialized memory) via crafted API calls.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3174", url: "https://www.suse.com/security/cve/CVE-2014-3174", }, { category: "external", summary: "SUSE Bug 893720 for CVE-2014-3174", url: "https://bugzilla.suse.com/893720", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2014-3174", }, { cve: "CVE-2014-3175", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3175", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 37.0.2062.94 allow attackers to cause a denial of service or possibly have other impact via unknown vectors, related to the load_truetype_glyph function in truetype/ttgload.c in FreeType and other functions in other components.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3175", url: "https://www.suse.com/security/cve/CVE-2014-3175", }, { category: "external", summary: "SUSE Bug 893720 for CVE-2014-3175", url: "https://bugzilla.suse.com/893720", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2014-3175", }, { cve: "CVE-2014-3176", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3176", }, ], notes: [ { category: "general", text: "Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-3177.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3176", url: "https://www.suse.com/security/cve/CVE-2014-3176", }, { category: "external", summary: "SUSE Bug 893720 for CVE-2014-3176", url: "https://bugzilla.suse.com/893720", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2014-3176", }, { cve: "CVE-2014-3177", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3177", }, ], notes: [ { category: "general", text: "Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-3176.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3177", url: "https://www.suse.com/security/cve/CVE-2014-3177", }, { category: "external", summary: "SUSE Bug 893720 for CVE-2014-3177", url: "https://bugzilla.suse.com/893720", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2014-3177", }, { cve: "CVE-2014-3178", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3178", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in core/dom/Node.cpp in Blink, as used in Google Chrome before 37.0.2062.120, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of render-tree inconsistencies.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3178", url: "https://www.suse.com/security/cve/CVE-2014-3178", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-3178", }, { cve: "CVE-2014-3188", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3188", }, ], notes: [ { category: "general", text: "Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and Google V8, which allows remote attackers to execute arbitrary code via vectors involving JSON data, related to improper parsing of an escaped index by ParseJsonObject in json-parser.h.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3188", url: "https://www.suse.com/security/cve/CVE-2014-3188", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2014-3188", }, { cve: "CVE-2014-3189", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3189", }, ], notes: [ { category: "general", text: "The chrome_pdf::CopyImage function in pdf/draw_utils.cc in the PDFium component in Google Chrome before 38.0.2125.101 does not properly validate image-data dimensions, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3189", url: "https://www.suse.com/security/cve/CVE-2014-3189", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2014-3189", }, { cve: "CVE-2014-3190", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3190", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the Event::currentTarget function in core/events/Event.cpp in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code that accesses the path property of an Event object.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3190", url: "https://www.suse.com/security/cve/CVE-2014-3190", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2014-3190", }, { cve: "CVE-2014-3191", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3191", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers a widget-position update that improperly interacts with the render tree, related to the FrameView::updateLayoutAndStyleForPainting function in core/frame/FrameView.cpp and the RenderLayerScrollableArea::setScrollOffset function in core/rendering/RenderLayerScrollableArea.cpp.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3191", url: "https://www.suse.com/security/cve/CVE-2014-3191", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2014-3191", }, { cve: "CVE-2014-3192", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3192", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in core/dom/ProcessingInstruction.cpp in the DOM implementation in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3192", url: "https://www.suse.com/security/cve/CVE-2014-3192", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2014-3192", }, { cve: "CVE-2014-3193", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3193", }, ], notes: [ { category: "general", text: "The SessionService::GetLastSession function in browser/sessions/session_service.cc in Google Chrome before 38.0.2125.101 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors that leverage \"type confusion\" for callback processing.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3193", url: "https://www.suse.com/security/cve/CVE-2014-3193", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2014-3193", }, { cve: "CVE-2014-3194", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3194", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the Web Workers implementation in Google Chrome before 38.0.2125.101 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3194", url: "https://www.suse.com/security/cve/CVE-2014-3194", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2014-3194", }, { cve: "CVE-2014-3195", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3195", }, ], notes: [ { category: "general", text: "Google V8, as used in Google Chrome before 38.0.2125.101, does not properly track JavaScript heap-memory allocations as allocations of uninitialized memory and does not properly concatenate arrays of double-precision floating-point numbers, which allows remote attackers to obtain sensitive information via crafted JavaScript code, related to the PagedSpace::AllocateRaw and NewSpace::AllocateRaw functions in heap/spaces-inl.h, the LargeObjectSpace::AllocateRaw function in heap/spaces.cc, and the Runtime_ArrayConcat function in runtime.cc.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3195", url: "https://www.suse.com/security/cve/CVE-2014-3195", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2014-3195", }, { cve: "CVE-2014-3196", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3196", }, ], notes: [ { category: "general", text: "base/memory/shared_memory_win.cc in Google Chrome before 38.0.2125.101 on Windows does not properly implement read-only restrictions on shared memory, which allows attackers to bypass a sandbox protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3196", url: "https://www.suse.com/security/cve/CVE-2014-3196", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-3196", }, { cve: "CVE-2014-3197", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3197", }, ], notes: [ { category: "general", text: "The NavigationScheduler::schedulePageBlock function in core/loader/NavigationScheduler.cpp in Blink, as used in Google Chrome before 38.0.2125.101, does not properly provide substitute data for pages blocked by the XSS auditor, which allows remote attackers to obtain sensitive information via a crafted web site.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3197", url: "https://www.suse.com/security/cve/CVE-2014-3197", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2014-3197", }, { cve: "CVE-2014-3198", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3198", }, ], notes: [ { category: "general", text: "The Instance::HandleInputEvent function in pdf/instance.cc in the PDFium component in Google Chrome before 38.0.2125.101 interprets a certain -1 value as an index instead of a no-visible-page error code, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3198", url: "https://www.suse.com/security/cve/CVE-2014-3198", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2014-3198", }, { cve: "CVE-2014-3199", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3199", }, ], notes: [ { category: "general", text: "The wrap function in bindings/core/v8/custom/V8EventCustom.cpp in the V8 bindings in Blink, as used in Google Chrome before 38.0.2125.101, has an erroneous fallback outcome for wrapper-selection failures, which allows remote attackers to cause a denial of service via vectors that trigger stopping a worker process that had been handling an Event object.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3199", url: "https://www.suse.com/security/cve/CVE-2014-3199", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2014-3199", }, { cve: "CVE-2014-3200", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-3200", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 38.0.2125.101 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-3200", url: "https://www.suse.com/security/cve/CVE-2014-3200", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2014-3200", }, { cve: "CVE-2014-7899", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7899", }, ], notes: [ { category: "general", text: "Google Chrome before 38.0.2125.101 allows remote attackers to spoof the address bar by placing a blob: substring at the beginning of the URL, followed by the original URI scheme and a long username string.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7899", url: "https://www.suse.com/security/cve/CVE-2014-7899", }, { category: "external", summary: "SUSE Bug 906320 for CVE-2014-7899", url: "https://bugzilla.suse.com/906320", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2014-7899", }, { cve: "CVE-2014-7900", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7900", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the CPDF_Parser::IsLinearizedFile function in fpdfapi/fpdf_parser/fpdf_parser_parser.cpp in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7900", url: "https://www.suse.com/security/cve/CVE-2014-7900", }, { category: "external", summary: "SUSE Bug 906317 for CVE-2014-7900", url: "https://bugzilla.suse.com/906317", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7900", }, { cve: "CVE-2014-7901", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7901", }, ], notes: [ { category: "general", text: "Integer overflow in the opj_t2_read_packet_data function in fxcodec/fx_libopenjpeg/libopenjpeg20/t2.c in OpenJPEG in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long segment in a JPEG image.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7901", url: "https://www.suse.com/security/cve/CVE-2014-7901", }, { category: "external", summary: "SUSE Bug 906322 for CVE-2014-7901", url: "https://bugzilla.suse.com/906322", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7901", }, { cve: "CVE-2014-7902", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7902", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7902", url: "https://www.suse.com/security/cve/CVE-2014-7902", }, { category: "external", summary: "SUSE Bug 906328 for CVE-2014-7902", url: "https://bugzilla.suse.com/906328", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7902", }, { cve: "CVE-2014-7903", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7903", }, ], notes: [ { category: "general", text: "Buffer overflow in OpenJPEG before r2911 in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JPEG image.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7903", url: "https://www.suse.com/security/cve/CVE-2014-7903", }, { category: "external", summary: "SUSE Bug 906318 for CVE-2014-7903", url: "https://bugzilla.suse.com/906318", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7903", }, { cve: "CVE-2014-7904", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7904", }, ], notes: [ { category: "general", text: "Buffer overflow in Skia, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7904", url: "https://www.suse.com/security/cve/CVE-2014-7904", }, { category: "external", summary: "SUSE Bug 906321 for CVE-2014-7904", url: "https://bugzilla.suse.com/906321", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7904", }, { cve: "CVE-2014-7905", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7905", }, ], notes: [ { category: "general", text: "Google Chrome before 39.0.2171.65 on Android does not prevent navigation to a URL in cases where an intent for the URL lacks CATEGORY_BROWSABLE, which allows remote attackers to bypass intended access restrictions via a crafted web site.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7905", url: "https://www.suse.com/security/cve/CVE-2014-7905", }, { category: "external", summary: "SUSE Bug 906330 for CVE-2014-7905", url: "https://bugzilla.suse.com/906330", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2014-7905", }, { cve: "CVE-2014-7906", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7906", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the Pepper plugins in Google Chrome before 39.0.2171.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted Flash content that triggers an attempted PepperMediaDeviceManager access outside of the object's lifetime.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7906", url: "https://www.suse.com/security/cve/CVE-2014-7906", }, { category: "external", summary: "SUSE Bug 906319 for CVE-2014-7906", url: "https://bugzilla.suse.com/906319", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7906", }, { cve: "CVE-2014-7907", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7907", }, ], notes: [ { category: "general", text: "Multiple use-after-free vulnerabilities in modules/screen_orientation/ScreenOrientationController.cpp in Blink, as used in Google Chrome before 39.0.2171.65, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger improper handling of a detached frame, related to the (1) lock and (2) unlock methods.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7907", url: "https://www.suse.com/security/cve/CVE-2014-7907", }, { category: "external", summary: "SUSE Bug 906323 for CVE-2014-7907", url: "https://bugzilla.suse.com/906323", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7907", }, { cve: "CVE-2014-7908", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7908", }, ], notes: [ { category: "general", text: "Multiple integer overflows in the CheckMov function in media/base/container_names.cc in Google Chrome before 39.0.2171.65 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a large atom in (1) MPEG-4 or (2) QuickTime .mov data.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7908", url: "https://www.suse.com/security/cve/CVE-2014-7908", }, { category: "external", summary: "SUSE Bug 906324 for CVE-2014-7908", url: "https://bugzilla.suse.com/906324", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7908", }, { cve: "CVE-2014-7909", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7909", }, ], notes: [ { category: "general", text: "effects/SkDashPathEffect.cpp in Skia, as used in Google Chrome before 39.0.2171.65, computes a hash key using uninitialized integer values, which might allow remote attackers to cause a denial of service by rendering crafted data.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7909", url: "https://www.suse.com/security/cve/CVE-2014-7909", }, { category: "external", summary: "SUSE Bug 906326 for CVE-2014-7909", url: "https://bugzilla.suse.com/906326", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2014-7909", }, { cve: "CVE-2014-7910", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7910", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7910", url: "https://www.suse.com/security/cve/CVE-2014-7910", }, { category: "external", summary: "SUSE Bug 906327 for CVE-2014-7910", url: "https://bugzilla.suse.com/906327", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7910", }, { cve: "CVE-2014-7923", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7923", }, ], notes: [ { category: "general", text: "The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a look-behind expression.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7923", url: "https://www.suse.com/security/cve/CVE-2014-7923", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2014-7923", url: "https://bugzilla.suse.com/914468", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7923", }, { cve: "CVE-2014-7924", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7924", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the IndexedDB implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering duplicate BLOB references, related to content/browser/indexed_db/indexed_db_callbacks.cc and content/browser/indexed_db/indexed_db_dispatcher_host.cc.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7924", url: "https://www.suse.com/security/cve/CVE-2014-7924", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2014-7924", url: "https://bugzilla.suse.com/914468", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7924", }, { cve: "CVE-2014-7925", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7925", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the WebAudio implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an audio-rendering thread in which AudioNode data is improperly maintained.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7925", url: "https://www.suse.com/security/cve/CVE-2014-7925", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2014-7925", url: "https://bugzilla.suse.com/914468", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7925", }, { cve: "CVE-2014-7926", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7926", }, ], notes: [ { category: "general", text: "The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a zero-length quantifier.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7926", url: "https://www.suse.com/security/cve/CVE-2014-7926", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2014-7926", url: "https://bugzilla.suse.com/914468", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7926", }, { cve: "CVE-2014-7927", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7927", }, ], notes: [ { category: "general", text: "The SimplifiedLowering::DoLoadBuffer function in compiler/simplified-lowering.cc in Google V8, as used in Google Chrome before 40.0.2214.91, does not properly choose an integer data type, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7927", url: "https://www.suse.com/security/cve/CVE-2014-7927", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2014-7927", url: "https://bugzilla.suse.com/914468", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7927", }, { cve: "CVE-2014-7928", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7928", }, ], notes: [ { category: "general", text: "hydrogen.cc in Google V8, as used Google Chrome before 40.0.2214.91, does not properly handle arrays with holes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code that triggers an array copy.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7928", url: "https://www.suse.com/security/cve/CVE-2014-7928", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2014-7928", url: "https://bugzilla.suse.com/914468", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7928", }, { cve: "CVE-2014-7929", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7929", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving movement of a SCRIPT element across documents.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7929", url: "https://www.suse.com/security/cve/CVE-2014-7929", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2014-7929", url: "https://bugzilla.suse.com/914468", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7929", }, { cve: "CVE-2014-7930", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7930", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in core/events/TreeScopeEventContext.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers improper maintenance of TreeScope data.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7930", url: "https://www.suse.com/security/cve/CVE-2014-7930", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2014-7930", url: "https://bugzilla.suse.com/914468", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7930", }, { cve: "CVE-2014-7932", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7932", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the Element::detach function in core/dom/Element.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving pending updates of detached elements.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7932", url: "https://www.suse.com/security/cve/CVE-2014-7932", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2014-7932", url: "https://bugzilla.suse.com/914468", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7932", }, { cve: "CVE-2014-7933", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7933", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the matroska_read_seek function in libavformat/matroskadec.c in FFmpeg before 2.5.1, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Matroska file that triggers improper maintenance of tracks data.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7933", url: "https://www.suse.com/security/cve/CVE-2014-7933", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2014-7933", url: "https://bugzilla.suse.com/914468", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7933", }, { cve: "CVE-2014-7934", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7934", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to unexpected absence of document data structures.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7934", url: "https://www.suse.com/security/cve/CVE-2014-7934", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2014-7934", url: "https://bugzilla.suse.com/914468", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7934", }, { cve: "CVE-2014-7935", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7935", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in browser/speech/tts_message_filter.cc in the Speech implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving utterances from a closed tab.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7935", url: "https://www.suse.com/security/cve/CVE-2014-7935", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2014-7935", url: "https://bugzilla.suse.com/914468", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7935", }, { cve: "CVE-2014-7936", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7936", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the ZoomBubbleView::Close function in browser/ui/views/location_bar/zoom_bubble_view.cc in the Views implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document that triggers improper maintenance of a zoom bubble.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7936", url: "https://www.suse.com/security/cve/CVE-2014-7936", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2014-7936", url: "https://bugzilla.suse.com/914468", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7936", }, { cve: "CVE-2014-7937", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7937", }, ], notes: [ { category: "general", text: "Multiple off-by-one errors in libavcodec/vorbisdec.c in FFmpeg before 2.4.2, as used in Google Chrome before 40.0.2214.91, allow remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted Vorbis I data.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7937", url: "https://www.suse.com/security/cve/CVE-2014-7937", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2014-7937", url: "https://bugzilla.suse.com/914468", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7937", }, { cve: "CVE-2014-7938", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7938", }, ], notes: [ { category: "general", text: "The Fonts implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7938", url: "https://www.suse.com/security/cve/CVE-2014-7938", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2014-7938", url: "https://bugzilla.suse.com/914468", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7938", }, { cve: "CVE-2014-7939", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7939", }, ], notes: [ { category: "general", text: "Google Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code with Proxy.create and console.log calls, related to HTTP responses that lack an \"X-Content-Type-Options: nosniff\" header.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7939", url: "https://www.suse.com/security/cve/CVE-2014-7939", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2014-7939", url: "https://bugzilla.suse.com/914468", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7939", }, { cve: "CVE-2014-7940", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7940", }, ], notes: [ { category: "general", text: "The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted character sequence.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7940", url: "https://www.suse.com/security/cve/CVE-2014-7940", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2014-7940", url: "https://bugzilla.suse.com/914468", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7940", }, { cve: "CVE-2014-7941", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7941", }, ], notes: [ { category: "general", text: "The SelectionOwner::ProcessTarget function in ui/base/x/selection_owner.cc in the UI implementation in Google Chrome before 40.0.2214.91 uses an incorrect data type for a certain length value, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted X11 data.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7941", url: "https://www.suse.com/security/cve/CVE-2014-7941", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2014-7941", url: "https://bugzilla.suse.com/914468", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7941", }, { cve: "CVE-2014-7942", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7942", }, ], notes: [ { category: "general", text: "The Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7942", url: "https://www.suse.com/security/cve/CVE-2014-7942", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2014-7942", url: "https://bugzilla.suse.com/914468", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7942", }, { cve: "CVE-2014-7943", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7943", }, ], notes: [ { category: "general", text: "Skia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7943", url: "https://www.suse.com/security/cve/CVE-2014-7943", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2014-7943", url: "https://bugzilla.suse.com/914468", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7943", }, { cve: "CVE-2014-7944", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7944", }, ], notes: [ { category: "general", text: "The sycc422_to_rgb function in fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 40.0.2214.91, does not properly handle odd values of image width, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7944", url: "https://www.suse.com/security/cve/CVE-2014-7944", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2014-7944", url: "https://bugzilla.suse.com/914468", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7944", }, { cve: "CVE-2014-7945", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7945", }, ], notes: [ { category: "general", text: "OpenJPEG before r2908, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document, related to j2k.c, jp2.c, and t2.c.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7945", url: "https://www.suse.com/security/cve/CVE-2014-7945", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2014-7945", url: "https://bugzilla.suse.com/914468", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7945", }, { cve: "CVE-2014-7946", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7946", }, ], notes: [ { category: "general", text: "The RenderTable::simplifiedNormalFlowLayout function in core/rendering/RenderTable.cpp in Blink, as used in Google Chrome before 40.0.2214.91, skips captions during table layout in certain situations, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors related to the Fonts implementation.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7946", url: "https://www.suse.com/security/cve/CVE-2014-7946", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2014-7946", url: "https://bugzilla.suse.com/914468", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7946", }, { cve: "CVE-2014-7947", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7947", }, ], notes: [ { category: "general", text: "OpenJPEG before r2944, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document, related to j2k.c, jp2.c, pi.c, t1.c, t2.c, and tcd.c.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7947", url: "https://www.suse.com/security/cve/CVE-2014-7947", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2014-7947", url: "https://bugzilla.suse.com/914468", }, { category: "external", summary: "SUSE Bug 979911 for CVE-2014-7947", url: "https://bugzilla.suse.com/979911", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7947", }, { cve: "CVE-2014-7948", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2014-7948", }, ], notes: [ { category: "general", text: "The AppCacheUpdateJob::URLFetcher::OnResponseStarted function in content/browser/appcache/appcache_update_job.cc in Google Chrome before 40.0.2214.91 proceeds with AppCache caching for SSL sessions even if there is an X.509 certificate error, which allows man-in-the-middle attackers to spoof HTML5 application content via a crafted certificate.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2014-7948", url: "https://www.suse.com/security/cve/CVE-2014-7948", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2014-7948", url: "https://bugzilla.suse.com/914468", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2014-7948", }, { cve: "CVE-2015-1205", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1205", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.91 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1205", url: "https://www.suse.com/security/cve/CVE-2015-1205", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2015-1205", url: "https://bugzilla.suse.com/914468", }, { category: "external", summary: "SUSE Bug 915529 for CVE-2015-1205", url: "https://bugzilla.suse.com/915529", }, { category: "external", summary: "SUSE Bug 915530 for CVE-2015-1205", url: "https://bugzilla.suse.com/915530", }, { category: "external", summary: "SUSE Bug 915533 for CVE-2015-1205", url: "https://bugzilla.suse.com/915533", }, { category: "external", summary: "SUSE Bug 915534 for CVE-2015-1205", url: "https://bugzilla.suse.com/915534", }, { category: "external", summary: "SUSE Bug 915535 for CVE-2015-1205", url: "https://bugzilla.suse.com/915535", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1205", }, { cve: "CVE-2015-1209", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1209", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the VisibleSelection::nonBoundaryShadowTreeRootNode function in core/editing/VisibleSelection.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers improper handling of a shadow-root anchor.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1209", url: "https://www.suse.com/security/cve/CVE-2015-1209", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2015-1209", url: "https://bugzilla.suse.com/914468", }, { category: "external", summary: "SUSE Bug 916841 for CVE-2015-1209", url: "https://bugzilla.suse.com/916841", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1209", }, { cve: "CVE-2015-1210", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1210", }, ], notes: [ { category: "general", text: "The V8ThrowException::createDOMException function in bindings/core/v8/V8ThrowException.cpp in the V8 bindings in Blink, as used in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android, does not properly consider frame access restrictions during the throwing of an exception, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1210", url: "https://www.suse.com/security/cve/CVE-2015-1210", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2015-1210", url: "https://bugzilla.suse.com/914468", }, { category: "external", summary: "SUSE Bug 916843 for CVE-2015-1210", url: "https://bugzilla.suse.com/916843", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-1210", }, { cve: "CVE-2015-1211", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1211", }, ], notes: [ { category: "general", text: "The OriginCanAccessServiceWorkers function in content/browser/service_worker/service_worker_dispatcher_host.cc in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android does not properly restrict the URI scheme during a ServiceWorker registration, which allows remote attackers to gain privileges via a filesystem: URI.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1211", url: "https://www.suse.com/security/cve/CVE-2015-1211", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2015-1211", url: "https://bugzilla.suse.com/914468", }, { category: "external", summary: "SUSE Bug 916838 for CVE-2015-1211", url: "https://bugzilla.suse.com/916838", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1211", }, { cve: "CVE-2015-1212", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1212", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1212", url: "https://www.suse.com/security/cve/CVE-2015-1212", }, { category: "external", summary: "SUSE Bug 914468 for CVE-2015-1212", url: "https://bugzilla.suse.com/914468", }, { category: "external", summary: "SUSE Bug 916840 for CVE-2015-1212", url: "https://bugzilla.suse.com/916840", }, { category: "external", summary: "SUSE Bug 920825 for CVE-2015-1212", url: "https://bugzilla.suse.com/920825", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1212", }, { cve: "CVE-2015-1213", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1213", }, ], notes: [ { category: "general", text: "The SkBitmap::ReadRawPixels function in core/SkBitmap.cpp in the filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an out-of-bounds write operation.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1213", url: "https://www.suse.com/security/cve/CVE-2015-1213", }, { category: "external", summary: "SUSE Bug 920825 for CVE-2015-1213", url: "https://bugzilla.suse.com/920825", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1213", }, { cve: "CVE-2015-1214", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1214", }, ], notes: [ { category: "general", text: "Integer overflow in the SkAutoSTArray implementation in include/core/SkTemplates.h in the filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a reset action with a large count value, leading to an out-of-bounds write operation.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1214", url: "https://www.suse.com/security/cve/CVE-2015-1214", }, { category: "external", summary: "SUSE Bug 920825 for CVE-2015-1214", url: "https://bugzilla.suse.com/920825", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1214", }, { cve: "CVE-2015-1215", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1215", }, ], notes: [ { category: "general", text: "The filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an out-of-bounds write operation.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1215", url: "https://www.suse.com/security/cve/CVE-2015-1215", }, { category: "external", summary: "SUSE Bug 920825 for CVE-2015-1215", url: "https://bugzilla.suse.com/920825", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1215", }, { cve: "CVE-2015-1216", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1216", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the V8Window::namedPropertyGetterCustom function in bindings/core/v8/custom/V8WindowCustom.cpp in the V8 bindings in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a frame detachment.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1216", url: "https://www.suse.com/security/cve/CVE-2015-1216", }, { category: "external", summary: "SUSE Bug 920825 for CVE-2015-1216", url: "https://bugzilla.suse.com/920825", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1216", }, { cve: "CVE-2015-1217", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1217", }, ], notes: [ { category: "general", text: "The V8LazyEventListener::prepareListenerObject function in bindings/core/v8/V8LazyEventListener.cpp in the V8 bindings in Blink, as used in Google Chrome before 41.0.2272.76, does not properly compile listeners, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage \"type confusion.\"", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1217", url: "https://www.suse.com/security/cve/CVE-2015-1217", }, { category: "external", summary: "SUSE Bug 920825 for CVE-2015-1217", url: "https://bugzilla.suse.com/920825", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1217", }, { cve: "CVE-2015-1218", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1218", }, ], notes: [ { category: "general", text: "Multiple use-after-free vulnerabilities in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger movement of a SCRIPT element to different documents, related to (1) the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp and (2) the SVGScriptElement::didMoveToNewDocument function in core/svg/SVGScriptElement.cpp.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1218", url: "https://www.suse.com/security/cve/CVE-2015-1218", }, { category: "external", summary: "SUSE Bug 920825 for CVE-2015-1218", url: "https://bugzilla.suse.com/920825", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1218", }, { cve: "CVE-2015-1219", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1219", }, ], notes: [ { category: "general", text: "Integer overflow in the SkMallocPixelRef::NewAllocate function in core/SkMallocPixelRef.cpp in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted allocation of a large amount of memory during WebGL rendering.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1219", url: "https://www.suse.com/security/cve/CVE-2015-1219", }, { category: "external", summary: "SUSE Bug 920825 for CVE-2015-1219", url: "https://bugzilla.suse.com/920825", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1219", }, { cve: "CVE-2015-1220", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1220", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the GIFImageReader::parseData function in platform/image-decoders/gif/GIFImageReader.cpp in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted frame size in a GIF image.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1220", url: "https://www.suse.com/security/cve/CVE-2015-1220", }, { category: "external", summary: "SUSE Bug 920825 for CVE-2015-1220", url: "https://bugzilla.suse.com/920825", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-1220", }, { cve: "CVE-2015-1221", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1221", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect ordering of operations in the Web SQL Database thread relative to Blink's main thread, related to the shutdown function in web/WebKit.cpp.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1221", url: "https://www.suse.com/security/cve/CVE-2015-1221", }, { category: "external", summary: "SUSE Bug 920825 for CVE-2015-1221", url: "https://bugzilla.suse.com/920825", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1221", }, { cve: "CVE-2015-1222", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1222", }, ], notes: [ { category: "general", text: "Multiple use-after-free vulnerabilities in the ServiceWorkerScriptCacheMap implementation in content/browser/service_worker/service_worker_script_cache_map.cc in Google Chrome before 41.0.2272.76 allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a ServiceWorkerContextWrapper::DeleteAndStartOver call, related to the NotifyStartedCaching and NotifyFinishedCaching functions.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1222", url: "https://www.suse.com/security/cve/CVE-2015-1222", }, { category: "external", summary: "SUSE Bug 920825 for CVE-2015-1222", url: "https://bugzilla.suse.com/920825", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1222", }, { cve: "CVE-2015-1223", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1223", }, ], notes: [ { category: "general", text: "Multiple use-after-free vulnerabilities in core/html/HTMLInputElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger extraneous change events, as demonstrated by events for invalid input or input to read-only fields, related to the initializeTypeInParsing and updateType functions.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1223", url: "https://www.suse.com/security/cve/CVE-2015-1223", }, { category: "external", summary: "SUSE Bug 920825 for CVE-2015-1223", url: "https://bugzilla.suse.com/920825", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1223", }, { cve: "CVE-2015-1224", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1224", }, ], notes: [ { category: "general", text: "The VpxVideoDecoder::VpxDecode function in media/filters/vpx_video_decoder.cc in the vpxdecoder implementation in Google Chrome before 41.0.2272.76 does not ensure that alpha-plane dimensions are identical to image dimensions, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted VPx video data.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1224", url: "https://www.suse.com/security/cve/CVE-2015-1224", }, { category: "external", summary: "SUSE Bug 920825 for CVE-2015-1224", url: "https://bugzilla.suse.com/920825", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-1224", }, { cve: "CVE-2015-1225", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1225", }, ], notes: [ { category: "general", text: "PDFium, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1225", url: "https://www.suse.com/security/cve/CVE-2015-1225", }, { category: "external", summary: "SUSE Bug 920825 for CVE-2015-1225", url: "https://bugzilla.suse.com/920825", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-1225", }, { cve: "CVE-2015-1226", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1226", }, ], notes: [ { category: "general", text: "The DebuggerFunction::InitAgentHost function in browser/extensions/api/debugger/debugger_api.cc in Google Chrome before 41.0.2272.76 does not properly restrict what URLs are available as debugger targets, which allows remote attackers to bypass intended access restrictions via a crafted extension.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1226", url: "https://www.suse.com/security/cve/CVE-2015-1226", }, { category: "external", summary: "SUSE Bug 920825 for CVE-2015-1226", url: "https://bugzilla.suse.com/920825", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-1226", }, { cve: "CVE-2015-1227", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1227", }, ], notes: [ { category: "general", text: "The DragImage::create function in platform/DragImage.cpp in Blink, as used in Google Chrome before 41.0.2272.76, does not initialize memory for image drawing, which allows remote attackers to have an unspecified impact by triggering a failed image decoding, as demonstrated by an image for which the default orientation cannot be used.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1227", url: "https://www.suse.com/security/cve/CVE-2015-1227", }, { category: "external", summary: "SUSE Bug 920825 for CVE-2015-1227", url: "https://bugzilla.suse.com/920825", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1227", }, { cve: "CVE-2015-1228", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1228", }, ], notes: [ { category: "general", text: "The RenderCounter::updateCounter function in core/rendering/RenderCounter.cpp in Blink, as used in Google Chrome before 41.0.2272.76, does not force a relayout operation and consequently does not initialize memory for a data structure, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted Cascading Style Sheets (CSS) token sequence.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1228", url: "https://www.suse.com/security/cve/CVE-2015-1228", }, { category: "external", summary: "SUSE Bug 920825 for CVE-2015-1228", url: "https://bugzilla.suse.com/920825", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1228", }, { cve: "CVE-2015-1229", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1229", }, ], notes: [ { category: "general", text: "net/http/proxy_client_socket.cc in Google Chrome before 41.0.2272.76 does not properly handle a 407 (aka Proxy Authentication Required) HTTP status code accompanied by a Set-Cookie header, which allows remote proxy servers to conduct cookie-injection attacks via a crafted response.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1229", url: "https://www.suse.com/security/cve/CVE-2015-1229", }, { category: "external", summary: "SUSE Bug 920825 for CVE-2015-1229", url: "https://bugzilla.suse.com/920825", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-1229", }, { cve: "CVE-2015-1230", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1230", }, ], notes: [ { category: "general", text: "The getHiddenProperty function in bindings/core/v8/V8EventListenerList.h in Blink, as used in Google Chrome before 41.0.2272.76, has a name conflict with the AudioContext class, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via JavaScript code that adds an AudioContext event listener and triggers \"type confusion.\"", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1230", url: "https://www.suse.com/security/cve/CVE-2015-1230", }, { category: "external", summary: "SUSE Bug 920825 for CVE-2015-1230", url: "https://bugzilla.suse.com/920825", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1230", }, { cve: "CVE-2015-1231", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1231", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 41.0.2272.76 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1231", url: "https://www.suse.com/security/cve/CVE-2015-1231", }, { category: "external", summary: "SUSE Bug 920825 for CVE-2015-1231", url: "https://bugzilla.suse.com/920825", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1231", }, { cve: "CVE-2015-1233", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1233", }, ], notes: [ { category: "general", text: "Google Chrome before 41.0.2272.118 does not properly handle the interaction of IPC, the Gamepad API, and Google V8, which allows remote attackers to execute arbitrary code via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1233", url: "https://www.suse.com/security/cve/CVE-2015-1233", }, { category: "external", summary: "SUSE Bug 925713 for CVE-2015-1233", url: "https://bugzilla.suse.com/925713", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1233", }, { cve: "CVE-2015-1234", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1234", }, ], notes: [ { category: "general", text: "Race condition in gpu/command_buffer/service/gles2_cmd_decoder.cc in Google Chrome before 41.0.2272.118 allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact by manipulating OpenGL ES commands.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1234", url: "https://www.suse.com/security/cve/CVE-2015-1234", }, { category: "external", summary: "SUSE Bug 925714 for CVE-2015-1234", url: "https://bugzilla.suse.com/925714", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-1234", }, { cve: "CVE-2015-1235", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1235", }, ], notes: [ { category: "general", text: "The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in the HTML parser in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy via a crafted HTML document with an IFRAME element.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1235", url: "https://www.suse.com/security/cve/CVE-2015-1235", }, { category: "external", summary: "SUSE Bug 927302 for CVE-2015-1235", url: "https://bugzilla.suse.com/927302", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1235", }, { cve: "CVE-2015-1236", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1236", }, ], notes: [ { category: "general", text: "The MediaElementAudioSourceNode::process function in modules/webaudio/MediaElementAudioSourceNode.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy and obtain sensitive audio sample values via a crafted web site containing a media element.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1236", url: "https://www.suse.com/security/cve/CVE-2015-1236", }, { category: "external", summary: "SUSE Bug 927302 for CVE-2015-1236", url: "https://bugzilla.suse.com/927302", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1236", }, { cve: "CVE-2015-1237", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1237", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function in content/renderer/render_frame_impl.cc in Google Chrome before 42.0.2311.90 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger renderer IPC messages during a detach operation.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1237", url: "https://www.suse.com/security/cve/CVE-2015-1237", }, { category: "external", summary: "SUSE Bug 927302 for CVE-2015-1237", url: "https://bugzilla.suse.com/927302", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1237", }, { cve: "CVE-2015-1238", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1238", }, ], notes: [ { category: "general", text: "Skia, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1238", url: "https://www.suse.com/security/cve/CVE-2015-1238", }, { category: "external", summary: "SUSE Bug 927302 for CVE-2015-1238", url: "https://bugzilla.suse.com/927302", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1238", }, { cve: "CVE-2015-1240", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1240", }, ], notes: [ { category: "general", text: "gpu/blink/webgraphicscontext3d_impl.cc in the WebGL implementation in Google Chrome before 42.0.2311.90 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WebGL program that triggers a state inconsistency.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1240", url: "https://www.suse.com/security/cve/CVE-2015-1240", }, { category: "external", summary: "SUSE Bug 927302 for CVE-2015-1240", url: "https://bugzilla.suse.com/927302", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1240", }, { cve: "CVE-2015-1241", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1241", }, ], notes: [ { category: "general", text: "Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote attackers to trigger unintended UI actions via a crafted web site that conducts a \"tapjacking\" attack.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1241", url: "https://www.suse.com/security/cve/CVE-2015-1241", }, { category: "external", summary: "SUSE Bug 927302 for CVE-2015-1241", url: "https://bugzilla.suse.com/927302", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1241", }, { cve: "CVE-2015-1242", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1242", }, ], notes: [ { category: "general", text: "The ReduceTransitionElementsKind function in hydrogen-check-elimination.cc in Google V8 before 4.2.77.8, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that leverages \"type confusion\" in the check-elimination optimization.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1242", url: "https://www.suse.com/security/cve/CVE-2015-1242", }, { category: "external", summary: "SUSE Bug 927302 for CVE-2015-1242", url: "https://bugzilla.suse.com/927302", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1242", }, { cve: "CVE-2015-1243", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1243", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the MutationObserver::disconnect function in core/dom/MutationObserver.cpp in the DOM implementation in Blink, as used in Google Chrome before 42.0.2311.135, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering an attempt to unregister a MutationObserver object that is not currently registered.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1243", url: "https://www.suse.com/security/cve/CVE-2015-1243", }, { category: "external", summary: "SUSE Bug 929075 for CVE-2015-1243", url: "https://bugzilla.suse.com/929075", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-1243", }, { cve: "CVE-2015-1244", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1244", }, ], notes: [ { category: "general", text: "The URLRequest::GetHSTSRedirect function in url_request/url_request.cc in Google Chrome before 42.0.2311.90 does not replace the ws scheme with the wss scheme whenever an HSTS Policy is active, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for WebSocket traffic.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1244", url: "https://www.suse.com/security/cve/CVE-2015-1244", }, { category: "external", summary: "SUSE Bug 927302 for CVE-2015-1244", url: "https://bugzilla.suse.com/927302", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1244", }, { cve: "CVE-2015-1245", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1245", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the OpenPDFInReaderView::Update function in browser/ui/views/location_bar/open_pdf_in_reader_view.cc in Google Chrome before 41.0.2272.76 might allow user-assisted remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by triggering interaction with a PDFium \"Open PDF in Reader\" button that has an invalid tab association.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1245", url: "https://www.suse.com/security/cve/CVE-2015-1245", }, { category: "external", summary: "SUSE Bug 927302 for CVE-2015-1245", url: "https://bugzilla.suse.com/927302", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1245", }, { cve: "CVE-2015-1246", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1246", }, ], notes: [ { category: "general", text: "Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1246", url: "https://www.suse.com/security/cve/CVE-2015-1246", }, { category: "external", summary: "SUSE Bug 927302 for CVE-2015-1246", url: "https://bugzilla.suse.com/927302", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1246", }, { cve: "CVE-2015-1247", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1247", }, ], notes: [ { category: "general", text: "The SearchEngineTabHelper::OnPageHasOSDD function in browser/ui/search_engines/search_engine_tab_helper.cc in Google Chrome before 42.0.2311.90 does not prevent use of a file: URL for an OpenSearch descriptor XML document, which might allow remote attackers to obtain sensitive information from local files via a crafted (1) http or (2) https web site.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1247", url: "https://www.suse.com/security/cve/CVE-2015-1247", }, { category: "external", summary: "SUSE Bug 927302 for CVE-2015-1247", url: "https://bugzilla.suse.com/927302", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1247", }, { cve: "CVE-2015-1248", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1248", }, ], notes: [ { category: "general", text: "The FileSystem API in Google Chrome before 40.0.2214.91 allows remote attackers to bypass the SafeBrowsing for Executable Files protection mechanism by creating a .exe file in a temporary filesystem and then referencing this file with a filesystem:http: URL.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1248", url: "https://www.suse.com/security/cve/CVE-2015-1248", }, { category: "external", summary: "SUSE Bug 927302 for CVE-2015-1248", url: "https://bugzilla.suse.com/927302", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1248", }, { cve: "CVE-2015-1249", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1249", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.90 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1249", url: "https://www.suse.com/security/cve/CVE-2015-1249", }, { category: "external", summary: "SUSE Bug 927302 for CVE-2015-1249", url: "https://bugzilla.suse.com/927302", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1249", }, { cve: "CVE-2015-1250", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1250", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1250", url: "https://www.suse.com/security/cve/CVE-2015-1250", }, { category: "external", summary: "SUSE Bug 929075 for CVE-2015-1250", url: "https://bugzilla.suse.com/929075", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-1250", }, { cve: "CVE-2015-1251", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1251", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the SpeechRecognitionClient implementation in the Speech subsystem in Google Chrome before 43.0.2357.65 allows remote attackers to execute arbitrary code via a crafted document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1251", url: "https://www.suse.com/security/cve/CVE-2015-1251", }, { category: "external", summary: "SUSE Bug 931659 for CVE-2015-1251", url: "https://bugzilla.suse.com/931659", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-1251", }, { cve: "CVE-2015-1252", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1252", }, ], notes: [ { category: "general", text: "common/partial_circular_buffer.cc in Google Chrome before 43.0.2357.65 does not properly handle wraps, which allows remote attackers to bypass a sandbox protection mechanism or cause a denial of service (out-of-bounds write) via vectors that trigger a write operation with a large amount of data, related to the PartialCircularBuffer::Write and PartialCircularBuffer::DoWrite functions.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1252", url: "https://www.suse.com/security/cve/CVE-2015-1252", }, { category: "external", summary: "SUSE Bug 931671 for CVE-2015-1252", url: "https://bugzilla.suse.com/931671", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1252", }, { cve: "CVE-2015-1253", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1253", }, ], notes: [ { category: "general", text: "core/html/parser/HTMLConstructionSite.cpp in the DOM implementation in Blink, as used in Google Chrome before 43.0.2357.65, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that appends a child to a SCRIPT element, related to the insert and executeReparentTask functions.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1253", url: "https://www.suse.com/security/cve/CVE-2015-1253", }, { category: "external", summary: "SUSE Bug 931670 for CVE-2015-1253", url: "https://bugzilla.suse.com/931670", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1253", }, { cve: "CVE-2015-1254", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1254", }, ], notes: [ { category: "general", text: "core/dom/Document.cpp in Blink, as used in Google Chrome before 43.0.2357.65, enables the inheritance of the designMode attribute, which allows remote attackers to bypass the Same Origin Policy by leveraging the availability of editing.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1254", url: "https://www.suse.com/security/cve/CVE-2015-1254", }, { category: "external", summary: "SUSE Bug 931669 for CVE-2015-1254", url: "https://bugzilla.suse.com/931669", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-1254", }, { cve: "CVE-2015-1255", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1255", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in content/renderer/media/webaudio_capturer_source.cc in the WebAudio implementation in Google Chrome before 43.0.2357.65 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by leveraging improper handling of a stop action for an audio track.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1255", url: "https://www.suse.com/security/cve/CVE-2015-1255", }, { category: "external", summary: "SUSE Bug 931674 for CVE-2015-1255", url: "https://bugzilla.suse.com/931674", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-1255", }, { cve: "CVE-2015-1256", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1256", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 43.0.2357.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document that leverages improper handling of a shadow tree for a use element.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1256", url: "https://www.suse.com/security/cve/CVE-2015-1256", }, { category: "external", summary: "SUSE Bug 931664 for CVE-2015-1256", url: "https://bugzilla.suse.com/931664", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1256", }, { cve: "CVE-2015-1257", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1257", }, ], notes: [ { category: "general", text: "platform/graphics/filters/FEColorMatrix.cpp in the SVG implementation in Blink, as used in Google Chrome before 43.0.2357.65, does not properly handle an insufficient number of values in an feColorMatrix filter, which allows remote attackers to cause a denial of service (container overflow) or possibly have unspecified other impact via a crafted document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1257", url: "https://www.suse.com/security/cve/CVE-2015-1257", }, { category: "external", summary: "SUSE Bug 931665 for CVE-2015-1257", url: "https://bugzilla.suse.com/931665", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1257", }, { cve: "CVE-2015-1258", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1258", }, ], notes: [ { category: "general", text: "Google Chrome before 43.0.2357.65 relies on libvpx code that was not built with an appropriate --size-limit value, which allows remote attackers to trigger a negative value for a size field, and consequently cause a denial of service or possibly have unspecified other impact, via a crafted frame size in VP9 video data.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1258", url: "https://www.suse.com/security/cve/CVE-2015-1258", }, { category: "external", summary: "SUSE Bug 931666 for CVE-2015-1258", url: "https://bugzilla.suse.com/931666", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1258", }, { cve: "CVE-2015-1259", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1259", }, ], notes: [ { category: "general", text: "PDFium, as used in Google Chrome before 43.0.2357.65, does not properly initialize memory, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1259", url: "https://www.suse.com/security/cve/CVE-2015-1259", }, { category: "external", summary: "SUSE Bug 931667 for CVE-2015-1259", url: "https://bugzilla.suse.com/931667", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1259", }, { cve: "CVE-2015-1260", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1260", }, ], notes: [ { category: "general", text: "Multiple use-after-free vulnerabilities in content/renderer/media/user_media_client_impl.cc in the WebRTC implementation in Google Chrome before 43.0.2357.65 allow remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that executes upon completion of a getUserMedia request.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1260", url: "https://www.suse.com/security/cve/CVE-2015-1260", }, { category: "external", summary: "SUSE Bug 931668 for CVE-2015-1260", url: "https://bugzilla.suse.com/931668", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1260", }, { cve: "CVE-2015-1261", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1261", }, ], notes: [ { category: "general", text: "android/java/src/org/chromium/chrome/browser/WebsiteSettingsPopup.java in Google Chrome before 43.0.2357.65 on Android does not properly restrict use of a URL's fragment identifier during construction of a page-info popup, which allows remote attackers to spoof the URL bar or deliver misleading popup content via crafted text.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1261", url: "https://www.suse.com/security/cve/CVE-2015-1261", }, { category: "external", summary: "SUSE Bug 931673 for CVE-2015-1261", url: "https://bugzilla.suse.com/931673", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-1261", }, { cve: "CVE-2015-1262", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1262", }, ], notes: [ { category: "general", text: "platform/fonts/shaping/HarfBuzzShaper.cpp in Blink, as used in Google Chrome before 43.0.2357.65, does not initialize a certain width field, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted Unicode text.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1262", url: "https://www.suse.com/security/cve/CVE-2015-1262", }, { category: "external", summary: "SUSE Bug 931672 for CVE-2015-1262", url: "https://bugzilla.suse.com/931672", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1262", }, { cve: "CVE-2015-1263", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1263", }, ], notes: [ { category: "general", text: "The Spellcheck API implementation in Google Chrome before 43.0.2357.65 does not use an HTTPS session for downloading a Hunspell dictionary, which allows man-in-the-middle attackers to deliver incorrect spelling suggestions or possibly have unspecified other impact via a crafted file.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1263", url: "https://www.suse.com/security/cve/CVE-2015-1263", }, { category: "external", summary: "SUSE Bug 931663 for CVE-2015-1263", url: "https://bugzilla.suse.com/931663", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-1263", }, { cve: "CVE-2015-1264", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1264", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in Google Chrome before 43.0.2357.65 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted data that is improperly handled by the Bookmarks feature.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1264", url: "https://www.suse.com/security/cve/CVE-2015-1264", }, { category: "external", summary: "SUSE Bug 931661 for CVE-2015-1264", url: "https://bugzilla.suse.com/931661", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-1264", }, { cve: "CVE-2015-1265", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1265", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 43.0.2357.65 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1265", url: "https://www.suse.com/security/cve/CVE-2015-1265", }, { category: "external", summary: "SUSE Bug 931660 for CVE-2015-1265", url: "https://bugzilla.suse.com/931660", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1265", }, { cve: "CVE-2015-1266", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1266", }, ], notes: [ { category: "general", text: "content/browser/webui/content_web_ui_controller_factory.cc in Google Chrome before 43.0.2357.130 does not properly consider the scheme in determining whether a URL is associated with a WebUI SiteInstance, which allows remote attackers to bypass intended access restrictions via a similar URL, as demonstrated by use of http://gpu when there is a WebUI class for handling chrome://gpu requests.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1266", url: "https://www.suse.com/security/cve/CVE-2015-1266", }, { category: "external", summary: "SUSE Bug 935723 for CVE-2015-1266", url: "https://bugzilla.suse.com/935723", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-1266", }, { cve: "CVE-2015-1267", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1267", }, ], notes: [ { category: "general", text: "Blink, as used in Google Chrome before 43.0.2357.130, does not properly restrict the creation context during creation of a DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that uses a Blink public API, related to WebArrayBufferConverter.cpp, WebBlob.cpp, WebDOMError.cpp, and WebDOMFileSystem.cpp.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1267", url: "https://www.suse.com/security/cve/CVE-2015-1267", }, { category: "external", summary: "SUSE Bug 935723 for CVE-2015-1267", url: "https://bugzilla.suse.com/935723", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-1267", }, { cve: "CVE-2015-1268", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1268", }, ], notes: [ { category: "general", text: "bindings/scripts/v8_types.py in Blink, as used in Google Chrome before 43.0.2357.130, does not properly select a creation context for a return value's DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code, as demonstrated by use of a data: URL.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1268", url: "https://www.suse.com/security/cve/CVE-2015-1268", }, { category: "external", summary: "SUSE Bug 935723 for CVE-2015-1268", url: "https://bugzilla.suse.com/935723", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-1268", }, { cve: "CVE-2015-1269", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1269", }, ], notes: [ { category: "general", text: "The DecodeHSTSPreloadRaw function in net/http/transport_security_state.cc in Google Chrome before 43.0.2357.130 does not properly canonicalize DNS hostnames before making comparisons to HSTS or HPKP preload entries, which allows remote attackers to bypass intended access restrictions via a string that (1) ends in a . (dot) character or (2) is not entirely lowercase.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1269", url: "https://www.suse.com/security/cve/CVE-2015-1269", }, { category: "external", summary: "SUSE Bug 935723 for CVE-2015-1269", url: "https://bugzilla.suse.com/935723", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-1269", }, { cve: "CVE-2015-1270", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1270", }, ], notes: [ { category: "general", text: "The ucnv_io_getConverterName function in common/ucnv_io.cpp in International Components for Unicode (ICU), as used in Google Chrome before 44.0.2403.89, mishandles converter names with initial x- substrings, which allows remote attackers to cause a denial of service (read of uninitialized memory) or possibly have unspecified other impact via a crafted file.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1270", url: "https://www.suse.com/security/cve/CVE-2015-1270", }, { category: "external", summary: "SUSE Bug 939077 for CVE-2015-1270", url: "https://bugzilla.suse.com/939077", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1270", }, { cve: "CVE-2015-1271", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1271", }, ], notes: [ { category: "general", text: "PDFium, as used in Google Chrome before 44.0.2403.89, does not properly handle certain out-of-memory conditions, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted PDF document that triggers a large memory allocation.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1271", url: "https://www.suse.com/security/cve/CVE-2015-1271", }, { category: "external", summary: "SUSE Bug 939077 for CVE-2015-1271", url: "https://bugzilla.suse.com/939077", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1271", }, { cve: "CVE-2015-1272", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1272", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the GPU process implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging the continued availability of a GPUChannelHost data structure during Blink shutdown, related to content/browser/gpu/browser_gpu_channel_host_factory.cc and content/renderer/render_thread_impl.cc.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1272", url: "https://www.suse.com/security/cve/CVE-2015-1272", }, { category: "external", summary: "SUSE Bug 939077 for CVE-2015-1272", url: "https://bugzilla.suse.com/939077", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1272", }, { cve: "CVE-2015-1273", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1273", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid JPEG2000 data in a PDF document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1273", url: "https://www.suse.com/security/cve/CVE-2015-1273", }, { category: "external", summary: "SUSE Bug 939077 for CVE-2015-1273", url: "https://bugzilla.suse.com/939077", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1273", }, { cve: "CVE-2015-1274", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1274", }, ], notes: [ { category: "general", text: "Google Chrome before 44.0.2403.89 does not ensure that the auto-open list omits all dangerous file types, which makes it easier for remote attackers to execute arbitrary code by providing a crafted file and leveraging a user's previous \"Always open files of this type\" choice, related to download_commands.cc and download_prefs.cc.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1274", url: "https://www.suse.com/security/cve/CVE-2015-1274", }, { category: "external", summary: "SUSE Bug 939077 for CVE-2015-1274", url: "https://bugzilla.suse.com/939077", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1274", }, { cve: "CVE-2015-1275", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1275", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in org/chromium/chrome/browser/UrlUtilities.java in Google Chrome before 44.0.2403.89 on Android allows remote attackers to inject arbitrary web script or HTML via a crafted intent: URL, as demonstrated by a trailing alert(document.cookie);// substring, aka \"Universal XSS (UXSS).\"", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1275", url: "https://www.suse.com/security/cve/CVE-2015-1275", }, { category: "external", summary: "SUSE Bug 939077 for CVE-2015-1275", url: "https://bugzilla.suse.com/939077", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1275", }, { cve: "CVE-2015-1276", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1276", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in content/browser/indexed_db/indexed_db_backing_store.cc in the IndexedDB implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging an abort action before a certain write operation.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1276", url: "https://www.suse.com/security/cve/CVE-2015-1276", }, { category: "external", summary: "SUSE Bug 939077 for CVE-2015-1276", url: "https://bugzilla.suse.com/939077", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1276", }, { cve: "CVE-2015-1277", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1277", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the accessibility implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging lack of certain validity checks for accessibility-tree data structures.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1277", url: "https://www.suse.com/security/cve/CVE-2015-1277", }, { category: "external", summary: "SUSE Bug 939077 for CVE-2015-1277", url: "https://bugzilla.suse.com/939077", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1277", }, { cve: "CVE-2015-1278", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1278", }, ], notes: [ { category: "general", text: "content/browser/web_contents/web_contents_impl.cc in Google Chrome before 44.0.2403.89 does not ensure that a PDF document's modal dialog is closed upon navigation to an interstitial page, which allows remote attackers to spoof URLs via a crafted document, as demonstrated by the alert_dialog.pdf document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1278", url: "https://www.suse.com/security/cve/CVE-2015-1278", }, { category: "external", summary: "SUSE Bug 939077 for CVE-2015-1278", url: "https://bugzilla.suse.com/939077", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1278", }, { cve: "CVE-2015-1279", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1279", }, ], notes: [ { category: "general", text: "Integer overflow in the CJBig2_Image::expand function in fxcodec/jbig2/JBig2_Image.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via large height and stride values.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1279", url: "https://www.suse.com/security/cve/CVE-2015-1279", }, { category: "external", summary: "SUSE Bug 939077 for CVE-2015-1279", url: "https://bugzilla.suse.com/939077", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1279", }, { cve: "CVE-2015-1280", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1280", }, ], notes: [ { category: "general", text: "SkPictureShader.cpp in Skia, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging access to a renderer process and providing crafted serialized data.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1280", url: "https://www.suse.com/security/cve/CVE-2015-1280", }, { category: "external", summary: "SUSE Bug 939077 for CVE-2015-1280", url: "https://bugzilla.suse.com/939077", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1280", }, { cve: "CVE-2015-1281", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1281", }, ], notes: [ { category: "general", text: "core/loader/ImageLoader.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not properly determine the V8 context of a microtask, which allows remote attackers to bypass Content Security Policy (CSP) restrictions by providing an image from an unintended source.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1281", url: "https://www.suse.com/security/cve/CVE-2015-1281", }, { category: "external", summary: "SUSE Bug 939077 for CVE-2015-1281", url: "https://bugzilla.suse.com/939077", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1281", }, { cve: "CVE-2015-1282", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1282", }, ], notes: [ { category: "general", text: "Multiple use-after-free vulnerabilities in fpdfsdk/src/javascript/Document.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document, related to the (1) Document::delay and (2) Document::DoFieldDelay functions.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1282", url: "https://www.suse.com/security/cve/CVE-2015-1282", }, { category: "external", summary: "SUSE Bug 939077 for CVE-2015-1282", url: "https://bugzilla.suse.com/939077", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1282", }, { cve: "CVE-2015-1283", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1283", }, ], notes: [ { category: "general", text: "Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted XML data, a related issue to CVE-2015-2716.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1283", url: "https://www.suse.com/security/cve/CVE-2015-1283", }, { category: "external", summary: "SUSE Bug 1034050 for CVE-2015-1283", url: "https://bugzilla.suse.com/1034050", }, { category: "external", summary: "SUSE Bug 939077 for CVE-2015-1283", url: "https://bugzilla.suse.com/939077", }, { category: "external", summary: "SUSE Bug 979441 for CVE-2015-1283", url: "https://bugzilla.suse.com/979441", }, { category: "external", summary: "SUSE Bug 980391 for CVE-2015-1283", url: "https://bugzilla.suse.com/980391", }, { category: "external", summary: "SUSE Bug 983985 for CVE-2015-1283", url: "https://bugzilla.suse.com/983985", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-1283", }, { cve: "CVE-2015-1284", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1284", }, ], notes: [ { category: "general", text: "The LocalFrame::isURLAllowed function in core/frame/LocalFrame.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not properly check for a page's maximum number of frames, which allows remote attackers to cause a denial of service (invalid count value and use-after-free) or possibly have unspecified other impact via crafted JavaScript code that makes many createElement calls for IFRAME elements.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1284", url: "https://www.suse.com/security/cve/CVE-2015-1284", }, { category: "external", summary: "SUSE Bug 939077 for CVE-2015-1284", url: "https://bugzilla.suse.com/939077", }, { category: "external", summary: "SUSE Bug 959178 for CVE-2015-1284", url: "https://bugzilla.suse.com/959178", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1284", }, { cve: "CVE-2015-1285", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1285", }, ], notes: [ { category: "general", text: "The XSSAuditor::canonicalize function in core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 44.0.2403.89, does not properly choose a truncation point, which makes it easier for remote attackers to obtain sensitive information via an unspecified linear-time attack.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1285", url: "https://www.suse.com/security/cve/CVE-2015-1285", }, { category: "external", summary: "SUSE Bug 939077 for CVE-2015-1285", url: "https://bugzilla.suse.com/939077", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1285", }, { cve: "CVE-2015-1286", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1286", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in the V8ContextNativeHandler::GetModuleSystem function in extensions/renderer/v8_context_native_handler.cc in Google Chrome before 44.0.2403.89 allows remote attackers to inject arbitrary web script or HTML by leveraging the lack of a certain V8 context restriction, aka a Blink \"Universal XSS (UXSS).\"", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1286", url: "https://www.suse.com/security/cve/CVE-2015-1286", }, { category: "external", summary: "SUSE Bug 939077 for CVE-2015-1286", url: "https://bugzilla.suse.com/939077", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1286", }, { cve: "CVE-2015-1287", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1287", }, ], notes: [ { category: "general", text: "Blink, as used in Google Chrome before 44.0.2403.89, enables a quirks-mode exception that limits the cases in which a Cascading Style Sheets (CSS) document is required to have the text/css content type, which allows remote attackers to bypass the Same Origin Policy via a crafted web site, related to core/fetch/CSSStyleSheetResource.cpp.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1287", url: "https://www.suse.com/security/cve/CVE-2015-1287", }, { category: "external", summary: "SUSE Bug 939077 for CVE-2015-1287", url: "https://bugzilla.suse.com/939077", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1287", }, { cve: "CVE-2015-1288", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1288", }, ], notes: [ { category: "general", text: "The Spellcheck API implementation in Google Chrome before 44.0.2403.89 does not use an HTTPS session for downloading a Hunspell dictionary, which allows man-in-the-middle attackers to deliver incorrect spelling suggestions or possibly have unspecified other impact via a crafted file, a related issue to CVE-2015-1263.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1288", url: "https://www.suse.com/security/cve/CVE-2015-1288", }, { category: "external", summary: "SUSE Bug 939077 for CVE-2015-1288", url: "https://bugzilla.suse.com/939077", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1288", }, { cve: "CVE-2015-1289", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1289", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 44.0.2403.89 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1289", url: "https://www.suse.com/security/cve/CVE-2015-1289", }, { category: "external", summary: "SUSE Bug 939077 for CVE-2015-1289", url: "https://bugzilla.suse.com/939077", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1289", }, { cve: "CVE-2015-1291", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1291", }, ], notes: [ { category: "general", text: "The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 45.0.2454.85, does not check whether a node is expected, which allows remote attackers to bypass the Same Origin Policy or cause a denial of service (DOM tree corruption) via a web site with crafted JavaScript code and IFRAME elements.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1291", url: "https://www.suse.com/security/cve/CVE-2015-1291", }, { category: "external", summary: "SUSE Bug 944144 for CVE-2015-1291", url: "https://bugzilla.suse.com/944144", }, { category: "external", summary: "SUSE Bug 959178 for CVE-2015-1291", url: "https://bugzilla.suse.com/959178", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-1291", }, { cve: "CVE-2015-1292", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1292", }, ], notes: [ { category: "general", text: "The NavigatorServiceWorker::serviceWorker function in modules/serviceworkers/NavigatorServiceWorker.cpp in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to bypass the Same Origin Policy by accessing a Service Worker.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1292", url: "https://www.suse.com/security/cve/CVE-2015-1292", }, { category: "external", summary: "SUSE Bug 944144 for CVE-2015-1292", url: "https://bugzilla.suse.com/944144", }, { category: "external", summary: "SUSE Bug 959178 for CVE-2015-1292", url: "https://bugzilla.suse.com/959178", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-1292", }, { cve: "CVE-2015-1293", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1293", }, ], notes: [ { category: "general", text: "The DOM implementation in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1293", url: "https://www.suse.com/security/cve/CVE-2015-1293", }, { category: "external", summary: "SUSE Bug 944144 for CVE-2015-1293", url: "https://bugzilla.suse.com/944144", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1293", }, { cve: "CVE-2015-1294", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1294", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the SkMatrix::invertNonIdentity function in core/SkMatrix.cpp in Skia, as used in Google Chrome before 45.0.2454.85, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering the use of matrix elements that lead to an infinite result during an inversion calculation.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1294", url: "https://www.suse.com/security/cve/CVE-2015-1294", }, { category: "external", summary: "SUSE Bug 944144 for CVE-2015-1294", url: "https://bugzilla.suse.com/944144", }, { category: "external", summary: "SUSE Bug 959178 for CVE-2015-1294", url: "https://bugzilla.suse.com/959178", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1294", }, { cve: "CVE-2015-1295", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1295", }, ], notes: [ { category: "general", text: "Multiple use-after-free vulnerabilities in the PrintWebViewHelper class in components/printing/renderer/print_web_view_helper.cc in Google Chrome before 45.0.2454.85 allow user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact by triggering nested IPC messages during preparation for printing, as demonstrated by messages associated with PDF documents in conjunction with messages about printer capabilities.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1295", url: "https://www.suse.com/security/cve/CVE-2015-1295", }, { category: "external", summary: "SUSE Bug 944144 for CVE-2015-1295", url: "https://bugzilla.suse.com/944144", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1295", }, { cve: "CVE-2015-1296", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1296", }, ], notes: [ { category: "general", text: "The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a URL, as demonstrated by the omnibox in localizations for right-to-left languages.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1296", url: "https://www.suse.com/security/cve/CVE-2015-1296", }, { category: "external", summary: "SUSE Bug 944144 for CVE-2015-1296", url: "https://bugzilla.suse.com/944144", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-1296", }, { cve: "CVE-2015-1297", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1297", }, ], notes: [ { category: "general", text: "The WebRequest API implementation in extensions/browser/api/web_request/web_request_api.cc in Google Chrome before 45.0.2454.85 does not properly consider a request's source before accepting the request, which allows remote attackers to bypass intended access restrictions via a crafted (1) app or (2) extension.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1297", url: "https://www.suse.com/security/cve/CVE-2015-1297", }, { category: "external", summary: "SUSE Bug 944144 for CVE-2015-1297", url: "https://bugzilla.suse.com/944144", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1297", }, { cve: "CVE-2015-1298", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1298", }, ], notes: [ { category: "general", text: "The RuntimeEventRouter::OnExtensionUninstalled function in extensions/browser/api/runtime/runtime_api.cc in Google Chrome before 45.0.2454.85 does not ensure that the setUninstallURL preference corresponds to the URL of a web site, which allows user-assisted remote attackers to trigger access to an arbitrary URL via a crafted extension that is uninstalled.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1298", url: "https://www.suse.com/security/cve/CVE-2015-1298", }, { category: "external", summary: "SUSE Bug 944144 for CVE-2015-1298", url: "https://bugzilla.suse.com/944144", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-1298", }, { cve: "CVE-2015-1299", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1299", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the shared-timer implementation in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging erroneous timer firing, related to ThreadTimers.cpp and Timer.cpp.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1299", url: "https://www.suse.com/security/cve/CVE-2015-1299", }, { category: "external", summary: "SUSE Bug 944144 for CVE-2015-1299", url: "https://bugzilla.suse.com/944144", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1299", }, { cve: "CVE-2015-1300", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1300", }, ], notes: [ { category: "general", text: "The FrameFetchContext::updateTimingInfoForIFrameNavigation function in core/loader/FrameFetchContext.cpp in Blink, as used in Google Chrome before 45.0.2454.85, does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to obtain sensitive information via crafted JavaScript code that leverages a history.back call.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1300", url: "https://www.suse.com/security/cve/CVE-2015-1300", }, { category: "external", summary: "SUSE Bug 944144 for CVE-2015-1300", url: "https://bugzilla.suse.com/944144", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-1300", }, { cve: "CVE-2015-1301", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1301", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 45.0.2454.85 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1301", url: "https://www.suse.com/security/cve/CVE-2015-1301", }, { category: "external", summary: "SUSE Bug 944144 for CVE-2015-1301", url: "https://bugzilla.suse.com/944144", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1301", }, { cve: "CVE-2015-1302", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1302", }, ], notes: [ { category: "general", text: "The PDF viewer in Google Chrome before 46.0.2490.86 does not properly restrict scripting messages and API exposure, which allows remote attackers to bypass the Same Origin Policy via an unintended embedder or unintended plugin loading, related to pdf.js and out_of_process_instance.cc.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1302", url: "https://www.suse.com/security/cve/CVE-2015-1302", }, { category: "external", summary: "SUSE Bug 954579 for CVE-2015-1302", url: "https://bugzilla.suse.com/954579", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1302", }, { cve: "CVE-2015-1303", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1303", }, ], notes: [ { category: "general", text: "bindings/core/v8/V8DOMWrapper.h in Blink, as used in Google Chrome before 45.0.2454.101, does not perform a rethrow action to propagate information about a cross-context exception, which allows remote attackers to bypass the Same Origin Policy via a crafted HTML document containing an IFRAME element.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1303", url: "https://www.suse.com/security/cve/CVE-2015-1303", }, { category: "external", summary: "SUSE Bug 947504 for CVE-2015-1303", url: "https://bugzilla.suse.com/947504", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1303", }, { cve: "CVE-2015-1304", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-1304", }, ], notes: [ { category: "general", text: "object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not properly restrict method calls on access-checked objects, which allows remote attackers to bypass the Same Origin Policy via a (1) observe or (2) getNotifier call.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-1304", url: "https://www.suse.com/security/cve/CVE-2015-1304", }, { category: "external", summary: "SUSE Bug 947507 for CVE-2015-1304", url: "https://bugzilla.suse.com/947507", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-1304", }, { cve: "CVE-2015-6755", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6755", }, ], notes: [ { category: "general", text: "The ContainerNode::parserInsertBefore function in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 46.0.2490.71, proceeds with a DOM tree insertion in certain cases where a parent node no longer contains a child node, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6755", url: "https://www.suse.com/security/cve/CVE-2015-6755", }, { category: "external", summary: "SUSE Bug 950290 for CVE-2015-6755", url: "https://bugzilla.suse.com/950290", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-6755", }, { cve: "CVE-2015-6756", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6756", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the CPDFSDK_PageView implementation in fpdfsdk/src/fsdk_mgr.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by leveraging mishandling of a focused annotation in a PDF document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6756", url: "https://www.suse.com/security/cve/CVE-2015-6756", }, { category: "external", summary: "SUSE Bug 950290 for CVE-2015-6756", url: "https://bugzilla.suse.com/950290", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-6756", }, { cve: "CVE-2015-6757", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6757", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in content/browser/service_worker/embedded_worker_instance.cc in the ServiceWorker implementation in Google Chrome before 46.0.2490.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging object destruction in a callback.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6757", url: "https://www.suse.com/security/cve/CVE-2015-6757", }, { category: "external", summary: "SUSE Bug 950290 for CVE-2015-6757", url: "https://bugzilla.suse.com/950290", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-6757", }, { cve: "CVE-2015-6758", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6758", }, ], notes: [ { category: "general", text: "The CPDF_Document::GetPage function in fpdfapi/fpdf_parser/fpdf_parser_document.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, does not properly perform a cast of a dictionary object, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6758", url: "https://www.suse.com/security/cve/CVE-2015-6758", }, { category: "external", summary: "SUSE Bug 950290 for CVE-2015-6758", url: "https://bugzilla.suse.com/950290", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-6758", }, { cve: "CVE-2015-6759", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6759", }, ], notes: [ { category: "general", text: "The shouldTreatAsUniqueOrigin function in platform/weborigin/SecurityOrigin.cpp in Blink, as used in Google Chrome before 46.0.2490.71, does not ensure that the origin of a LocalStorage resource is considered unique, which allows remote attackers to obtain sensitive information via vectors involving a blob: URL.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6759", url: "https://www.suse.com/security/cve/CVE-2015-6759", }, { category: "external", summary: "SUSE Bug 950290 for CVE-2015-6759", url: "https://bugzilla.suse.com/950290", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-6759", }, { cve: "CVE-2015-6760", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6760", }, ], notes: [ { category: "general", text: "The Image11::map function in renderer/d3d/d3d11/Image11.cpp in libANGLE, as used in Google Chrome before 46.0.2490.71, mishandles mapping failures after device-lost events, which allows remote attackers to cause a denial of service (invalid read or write) or possibly have unspecified other impact via vectors involving a removed device.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6760", url: "https://www.suse.com/security/cve/CVE-2015-6760", }, { category: "external", summary: "SUSE Bug 950290 for CVE-2015-6760", url: "https://bugzilla.suse.com/950290", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-6760", }, { cve: "CVE-2015-6761", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6761", }, ], notes: [ { category: "general", text: "The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service (race condition and memory corruption) or possibly have unspecified other impact via a crafted WebM file.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6761", url: "https://www.suse.com/security/cve/CVE-2015-6761", }, { category: "external", summary: "SUSE Bug 950290 for CVE-2015-6761", url: "https://bugzilla.suse.com/950290", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-6761", }, { cve: "CVE-2015-6762", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6762", }, ], notes: [ { category: "general", text: "The CSSFontFaceSrcValue::fetch function in core/css/CSSFontFaceSrcValue.cpp in the Cascading Style Sheets (CSS) implementation in Blink, as used in Google Chrome before 46.0.2490.71, does not use the CORS cross-origin request algorithm when a font's URL appears to be a same-origin URL, which allows remote web servers to bypass the Same Origin Policy via a redirect.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6762", url: "https://www.suse.com/security/cve/CVE-2015-6762", }, { category: "external", summary: "SUSE Bug 950290 for CVE-2015-6762", url: "https://bugzilla.suse.com/950290", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-6762", }, { cve: "CVE-2015-6763", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6763", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 46.0.2490.71 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6763", url: "https://www.suse.com/security/cve/CVE-2015-6763", }, { category: "external", summary: "SUSE Bug 950290 for CVE-2015-6763", url: "https://bugzilla.suse.com/950290", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-6763", }, { cve: "CVE-2015-6764", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6764", }, ], notes: [ { category: "general", text: "The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used in Google Chrome before 47.0.2526.73, improperly loads array elements, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted JavaScript code.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6764", url: "https://www.suse.com/security/cve/CVE-2015-6764", }, { category: "external", summary: "SUSE Bug 956902 for CVE-2015-6764", url: "https://bugzilla.suse.com/956902", }, { category: "external", summary: "SUSE Bug 957519 for CVE-2015-6764", url: "https://bugzilla.suse.com/957519", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2015-6764", }, { cve: "CVE-2015-6765", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6765", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in content/browser/appcache/appcache_update_job.cc in Google Chrome before 47.0.2526.73 allows remote attackers to execute arbitrary code or cause a denial of service by leveraging the mishandling of AppCache update jobs.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6765", url: "https://www.suse.com/security/cve/CVE-2015-6765", }, { category: "external", summary: "SUSE Bug 957519 for CVE-2015-6765", url: "https://bugzilla.suse.com/957519", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2015-6765", }, { cve: "CVE-2015-6766", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6766", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the AppCache implementation in Google Chrome before 47.0.2526.73 allows remote attackers with renderer access to cause a denial of service or possibly have unspecified other impact by leveraging incorrect AppCacheUpdateJob behavior associated with duplicate cache selection.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6766", url: "https://www.suse.com/security/cve/CVE-2015-6766", }, { category: "external", summary: "SUSE Bug 957519 for CVE-2015-6766", url: "https://bugzilla.suse.com/957519", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-6766", }, { cve: "CVE-2015-6767", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6767", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in content/browser/appcache/appcache_dispatcher_host.cc in the AppCache implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect pointer maintenance associated with certain callbacks.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6767", url: "https://www.suse.com/security/cve/CVE-2015-6767", }, { category: "external", summary: "SUSE Bug 957519 for CVE-2015-6767", url: "https://bugzilla.suse.com/957519", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-6767", }, { cve: "CVE-2015-6768", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6768", }, ], notes: [ { category: "general", text: "The DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-6770.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6768", url: "https://www.suse.com/security/cve/CVE-2015-6768", }, { category: "external", summary: "SUSE Bug 957519 for CVE-2015-6768", url: "https://bugzilla.suse.com/957519", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-6768", }, { cve: "CVE-2015-6769", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6769", }, ], notes: [ { category: "general", text: "The provisional-load commit implementation in WebKit/Source/bindings/core/v8/WindowProxy.cpp in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy by leveraging a delay in window proxy clearing.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6769", url: "https://www.suse.com/security/cve/CVE-2015-6769", }, { category: "external", summary: "SUSE Bug 957519 for CVE-2015-6769", url: "https://bugzilla.suse.com/957519", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-6769", }, { cve: "CVE-2015-6770", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6770", }, ], notes: [ { category: "general", text: "The DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-6768.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6770", url: "https://www.suse.com/security/cve/CVE-2015-6770", }, { category: "external", summary: "SUSE Bug 957519 for CVE-2015-6770", url: "https://bugzilla.suse.com/957519", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-6770", }, { cve: "CVE-2015-6771", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6771", }, ], notes: [ { category: "general", text: "js/array.js in Google V8, as used in Google Chrome before 47.0.2526.73, improperly implements certain map and filter operations for arrays, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted JavaScript code.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6771", url: "https://www.suse.com/security/cve/CVE-2015-6771", }, { category: "external", summary: "SUSE Bug 957519 for CVE-2015-6771", url: "https://bugzilla.suse.com/957519", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-6771", }, { cve: "CVE-2015-6772", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6772", }, ], notes: [ { category: "general", text: "The DOM implementation in Blink, as used in Google Chrome before 47.0.2526.73, does not prevent javascript: URL navigation while a document is being detached, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that improperly interacts with a plugin.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6772", url: "https://www.suse.com/security/cve/CVE-2015-6772", }, { category: "external", summary: "SUSE Bug 957519 for CVE-2015-6772", url: "https://bugzilla.suse.com/957519", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-6772", }, { cve: "CVE-2015-6773", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6773", }, ], notes: [ { category: "general", text: "The convolution implementation in Skia, as used in Google Chrome before 47.0.2526.73, does not properly constrain row lengths, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted graphics data.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6773", url: "https://www.suse.com/security/cve/CVE-2015-6773", }, { category: "external", summary: "SUSE Bug 957519 for CVE-2015-6773", url: "https://bugzilla.suse.com/957519", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-6773", }, { cve: "CVE-2015-6774", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6774", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes_extension_bindings.cc in the Extensions implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that modifies a pointer used for reporting loadTimes data.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6774", url: "https://www.suse.com/security/cve/CVE-2015-6774", }, { category: "external", summary: "SUSE Bug 957519 for CVE-2015-6774", url: "https://bugzilla.suse.com/957519", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-6774", }, { cve: "CVE-2015-6775", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6775", }, ], notes: [ { category: "general", text: "fpdfsdk/src/jsapi/fxjs_v8.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, does not use signatures, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage \"type confusion.\"", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6775", url: "https://www.suse.com/security/cve/CVE-2015-6775", }, { category: "external", summary: "SUSE Bug 957519 for CVE-2015-6775", url: "https://bugzilla.suse.com/957519", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-6775", }, { cve: "CVE-2015-6776", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6776", }, ], notes: [ { category: "general", text: "The opj_dwt_decode_1* functions in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 47.0.2526.73, allow remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG 2000 data that is mishandled during a discrete wavelet transform.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6776", url: "https://www.suse.com/security/cve/CVE-2015-6776", }, { category: "external", summary: "SUSE Bug 957519 for CVE-2015-6776", url: "https://bugzilla.suse.com/957519", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-6776", }, { cve: "CVE-2015-6777", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6777", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the ContainerNode::notifyNodeInsertedInternal function in WebKit/Source/core/dom/ContainerNode.cpp in the DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOMCharacterDataModified events for certain detached-subtree insertions.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6777", url: "https://www.suse.com/security/cve/CVE-2015-6777", }, { category: "external", summary: "SUSE Bug 957519 for CVE-2015-6777", url: "https://bugzilla.suse.com/957519", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-6777", }, { cve: "CVE-2015-6778", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6778", }, ], notes: [ { category: "general", text: "The CJBig2_SymbolDict class in fxcodec/jbig2/JBig2_SymbolDict.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via a PDF document containing crafted data with JBIG2 compression.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6778", url: "https://www.suse.com/security/cve/CVE-2015-6778", }, { category: "external", summary: "SUSE Bug 957519 for CVE-2015-6778", url: "https://bugzilla.suse.com/957519", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-6778", }, { cve: "CVE-2015-6779", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6779", }, ], notes: [ { category: "general", text: "PDFium, as used in Google Chrome before 47.0.2526.73, does not properly restrict use of chrome: URLs, which allows remote attackers to bypass intended scheme restrictions via a crafted PDF document, as demonstrated by a document with a link to a chrome://settings URL.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6779", url: "https://www.suse.com/security/cve/CVE-2015-6779", }, { category: "external", summary: "SUSE Bug 957519 for CVE-2015-6779", url: "https://bugzilla.suse.com/957519", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-6779", }, { cve: "CVE-2015-6780", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6780", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the Infobars implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site, related to browser/ui/views/website_settings/website_settings_popup_view.cc.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6780", url: "https://www.suse.com/security/cve/CVE-2015-6780", }, { category: "external", summary: "SUSE Bug 957519 for CVE-2015-6780", url: "https://bugzilla.suse.com/957519", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-6780", }, { cve: "CVE-2015-6781", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6781", }, ], notes: [ { category: "general", text: "Integer overflow in the FontData::Bound function in data/font_data.cc in Google sfntly, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted offset or length value within font data in an SFNT container.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6781", url: "https://www.suse.com/security/cve/CVE-2015-6781", }, { category: "external", summary: "SUSE Bug 957519 for CVE-2015-6781", url: "https://bugzilla.suse.com/957519", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-6781", }, { cve: "CVE-2015-6782", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6782", }, ], notes: [ { category: "general", text: "The Document::open function in WebKit/Source/core/dom/Document.cpp in Google Chrome before 47.0.2526.73 does not ensure that page-dismissal event handling is compatible with modal-dialog blocking, which makes it easier for remote attackers to spoof Omnibox content via a crafted web site.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6782", url: "https://www.suse.com/security/cve/CVE-2015-6782", }, { category: "external", summary: "SUSE Bug 957519 for CVE-2015-6782", url: "https://bugzilla.suse.com/957519", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-6782", }, { cve: "CVE-2015-6783", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6783", }, ], notes: [ { category: "general", text: "The FindStartOffsetOfFileInZipFile function in crazy_linker_zip.cpp in crazy_linker (aka Crazy Linker) in Android 5.x and 6.x, as used in Google Chrome before 47.0.2526.73, improperly searches for an EOCD record, which allows attackers to bypass a signature-validation requirement via a crafted ZIP archive.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6783", url: "https://www.suse.com/security/cve/CVE-2015-6783", }, { category: "external", summary: "SUSE Bug 957519 for CVE-2015-6783", url: "https://bugzilla.suse.com/957519", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-6783", }, { cve: "CVE-2015-6784", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6784", }, ], notes: [ { category: "general", text: "The page serializer in Google Chrome before 47.0.2526.73 mishandles Mark of the Web (MOTW) comments for URLs containing a \"--\" sequence, which might allow remote attackers to inject HTML via a crafted URL, as demonstrated by an initial http://example.com?-- substring.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6784", url: "https://www.suse.com/security/cve/CVE-2015-6784", }, { category: "external", summary: "SUSE Bug 957519 for CVE-2015-6784", url: "https://bugzilla.suse.com/957519", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-6784", }, { cve: "CVE-2015-6785", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6785", }, ], notes: [ { category: "general", text: "The CSPSource::hostMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Google Chrome before 47.0.2526.73 accepts an x.y hostname as a match for a *.x.y pattern, which might allow remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging a policy that was intended to be specific to subdomains.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6785", url: "https://www.suse.com/security/cve/CVE-2015-6785", }, { category: "external", summary: "SUSE Bug 957519 for CVE-2015-6785", url: "https://bugzilla.suse.com/957519", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-6785", }, { cve: "CVE-2015-6786", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6786", }, ], notes: [ { category: "general", text: "The CSPSourceList::matches function in WebKit/Source/core/frame/csp/CSPSourceList.cpp in the Content Security Policy (CSP) implementation in Google Chrome before 47.0.2526.73 accepts a blob:, data:, or filesystem: URL as a match for a * pattern, which allows remote attackers to bypass intended scheme restrictions in opportunistic circumstances by leveraging a policy that relies on this pattern.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6786", url: "https://www.suse.com/security/cve/CVE-2015-6786", }, { category: "external", summary: "SUSE Bug 957519 for CVE-2015-6786", url: "https://bugzilla.suse.com/957519", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-6786", }, { cve: "CVE-2015-6787", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6787", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6787", url: "https://www.suse.com/security/cve/CVE-2015-6787", }, { category: "external", summary: "SUSE Bug 957519 for CVE-2015-6787", url: "https://bugzilla.suse.com/957519", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2015-6787", }, { cve: "CVE-2015-6788", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6788", }, ], notes: [ { category: "general", text: "The ObjectBackedNativeHandler class in extensions/renderer/object_backed_native_handler.cc in the extensions subsystem in Google Chrome before 47.0.2526.80 improperly implements handler functions, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage \"type confusion.\"", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6788", url: "https://www.suse.com/security/cve/CVE-2015-6788", }, { category: "external", summary: "SUSE Bug 957519 for CVE-2015-6788", url: "https://bugzilla.suse.com/957519", }, { category: "external", summary: "SUSE Bug 958481 for CVE-2015-6788", url: "https://bugzilla.suse.com/958481", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2015-6788", }, { cve: "CVE-2015-6789", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6789", }, ], notes: [ { category: "general", text: "Race condition in the MutationObserver implementation in Blink, as used in Google Chrome before 47.0.2526.80, allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact by leveraging unanticipated object deletion.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6789", url: "https://www.suse.com/security/cve/CVE-2015-6789", }, { category: "external", summary: "SUSE Bug 957519 for CVE-2015-6789", url: "https://bugzilla.suse.com/957519", }, { category: "external", summary: "SUSE Bug 958481 for CVE-2015-6789", url: "https://bugzilla.suse.com/958481", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2015-6789", }, { cve: "CVE-2015-6790", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6790", }, ], notes: [ { category: "general", text: "The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary web script or HTML via a crafted document, as demonstrated by a double-quote character inside a single-quoted string.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6790", url: "https://www.suse.com/security/cve/CVE-2015-6790", }, { category: "external", summary: "SUSE Bug 957519 for CVE-2015-6790", url: "https://bugzilla.suse.com/957519", }, { category: "external", summary: "SUSE Bug 958481 for CVE-2015-6790", url: "https://bugzilla.suse.com/958481", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-6790", }, { cve: "CVE-2015-6791", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6791", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.80 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6791", url: "https://www.suse.com/security/cve/CVE-2015-6791", }, { category: "external", summary: "SUSE Bug 957519 for CVE-2015-6791", url: "https://bugzilla.suse.com/957519", }, { category: "external", summary: "SUSE Bug 958481 for CVE-2015-6791", url: "https://bugzilla.suse.com/958481", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2015-6791", }, { cve: "CVE-2015-6792", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-6792", }, ], notes: [ { category: "general", text: "The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to midi_manager.cc, midi_manager_alsa.cc, and midi_manager_mac.cc, a different vulnerability than CVE-2015-8664.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-6792", url: "https://www.suse.com/security/cve/CVE-2015-6792", }, { category: "external", summary: "SUSE Bug 959458 for CVE-2015-6792", url: "https://bugzilla.suse.com/959458", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2015-6792", }, { cve: "CVE-2015-7834", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-7834", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google V8 before 4.6.85.23, as used in Google Chrome before 46.0.2490.71, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-7834", url: "https://www.suse.com/security/cve/CVE-2015-7834", }, { category: "external", summary: "SUSE Bug 950290 for CVE-2015-7834", url: "https://bugzilla.suse.com/950290", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2015-7834", }, { cve: "CVE-2015-8126", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2015-8126", }, ], notes: [ { category: "general", text: "Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2015-8126", url: "https://www.suse.com/security/cve/CVE-2015-8126", }, { category: "external", summary: "SUSE Bug 954980 for CVE-2015-8126", url: "https://bugzilla.suse.com/954980", }, { category: "external", summary: "SUSE Bug 958198 for CVE-2015-8126", url: "https://bugzilla.suse.com/958198", }, { category: "external", summary: "SUSE Bug 960402 for CVE-2015-8126", url: "https://bugzilla.suse.com/960402", }, { category: "external", summary: "SUSE Bug 962743 for CVE-2015-8126", url: "https://bugzilla.suse.com/962743", }, { category: "external", summary: "SUSE Bug 963937 for CVE-2015-8126", url: "https://bugzilla.suse.com/963937", }, { category: "external", summary: "SUSE Bug 969333 for CVE-2015-8126", url: "https://bugzilla.suse.com/969333", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2015-8126", }, { cve: "CVE-2016-1612", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1612", }, ], notes: [ { category: "general", text: "The LoadIC::UpdateCaches function in ic/ic.cc in Google V8, as used in Google Chrome before 48.0.2564.82, does not ensure receiver compatibility before performing a cast of an unspecified variable, which allows remote attackers to cause a denial of service or possibly have unknown other impact via crafted JavaScript code.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1612", url: "https://www.suse.com/security/cve/CVE-2016-1612", }, { category: "external", summary: "SUSE Bug 963184 for CVE-2016-1612", url: "https://bugzilla.suse.com/963184", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.6, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1612", }, { cve: "CVE-2016-1613", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1613", }, ], notes: [ { category: "general", text: "Multiple use-after-free vulnerabilities in the formfiller implementation in PDFium, as used in Google Chrome before 48.0.2564.82, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document, related to improper tracking of the destruction of (1) IPWL_FocusHandler and (2) IPWL_Provider objects.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1613", url: "https://www.suse.com/security/cve/CVE-2016-1613", }, { category: "external", summary: "SUSE Bug 963185 for CVE-2016-1613", url: "https://bugzilla.suse.com/963185", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.6, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1613", }, { cve: "CVE-2016-1614", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1614", }, ], notes: [ { category: "general", text: "The UnacceleratedImageBufferSurface class in WebKit/Source/platform/graphics/UnacceleratedImageBufferSurface.cpp in Blink, as used in Google Chrome before 48.0.2564.82, mishandles the initialization mode, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1614", url: "https://www.suse.com/security/cve/CVE-2016-1614", }, { category: "external", summary: "SUSE Bug 963186 for CVE-2016-1614", url: "https://bugzilla.suse.com/963186", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-1614", }, { cve: "CVE-2016-1615", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1615", }, ], notes: [ { category: "general", text: "The Omnibox implementation in Google Chrome before 48.0.2564.82 allows remote attackers to spoof a document's origin via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1615", url: "https://www.suse.com/security/cve/CVE-2016-1615", }, { category: "external", summary: "SUSE Bug 963187 for CVE-2016-1615", url: "https://bugzilla.suse.com/963187", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-1615", }, { cve: "CVE-2016-1616", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1616", }, ], notes: [ { category: "general", text: "The CustomButton::AcceleratorPressed function in ui/views/controls/button/custom_button.cc in Google Chrome before 48.0.2564.82 allows remote attackers to spoof URLs via vectors involving an unfocused custom button.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1616", url: "https://www.suse.com/security/cve/CVE-2016-1616", }, { category: "external", summary: "SUSE Bug 963188 for CVE-2016-1616", url: "https://bugzilla.suse.com/963188", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-1616", }, { cve: "CVE-2016-1617", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1617", }, ], notes: [ { category: "general", text: "The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 48.0.2564.82, does not apply http policies to https URLs and does not apply ws policies to wss URLs, which makes it easier for remote attackers to determine whether a specific HSTS web site has been visited by reading a CSP report.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1617", url: "https://www.suse.com/security/cve/CVE-2016-1617", }, { category: "external", summary: "SUSE Bug 963189 for CVE-2016-1617", url: "https://bugzilla.suse.com/963189", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-1617", }, { cve: "CVE-2016-1618", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1618", }, ], notes: [ { category: "general", text: "Blink, as used in Google Chrome before 48.0.2564.82, does not ensure that a proper cryptographicallyRandomValues random number generator is used, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1618", url: "https://www.suse.com/security/cve/CVE-2016-1618", }, { category: "external", summary: "SUSE Bug 963190 for CVE-2016-1618", url: "https://bugzilla.suse.com/963190", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-1618", }, { cve: "CVE-2016-1619", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1619", }, ], notes: [ { category: "general", text: "Multiple integer overflows in the (1) sycc422_to_rgb and (2) sycc444_to_rgb functions in fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 48.0.2564.82, allow remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted PDF document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1619", url: "https://www.suse.com/security/cve/CVE-2016-1619", }, { category: "external", summary: "SUSE Bug 963191 for CVE-2016-1619", url: "https://bugzilla.suse.com/963191", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.6, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1619", }, { cve: "CVE-2016-1620", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1620", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 48.0.2564.82 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1620", url: "https://www.suse.com/security/cve/CVE-2016-1620", }, { category: "external", summary: "SUSE Bug 963192 for CVE-2016-1620", url: "https://bugzilla.suse.com/963192", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-1620", }, { cve: "CVE-2016-1622", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1622", }, ], notes: [ { category: "general", text: "The Extensions subsystem in Google Chrome before 48.0.2564.109 does not prevent use of the Object.defineProperty method to override intended extension behavior, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1622", url: "https://www.suse.com/security/cve/CVE-2016-1622", }, { category: "external", summary: "SUSE Bug 965999 for CVE-2016-1622", url: "https://bugzilla.suse.com/965999", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-1622", }, { cve: "CVE-2016-1623", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1623", }, ], notes: [ { category: "general", text: "The DOM implementation in Google Chrome before 48.0.2564.109 does not properly restrict frame-attach operations from occurring during or after frame-detach operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site, related to FrameLoader.cpp, HTMLFrameOwnerElement.h, LocalFrame.cpp, and WebLocalFrameImpl.cpp.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1623", url: "https://www.suse.com/security/cve/CVE-2016-1623", }, { category: "external", summary: "SUSE Bug 965999 for CVE-2016-1623", url: "https://bugzilla.suse.com/965999", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-1623", }, { cve: "CVE-2016-1624", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1624", }, ], notes: [ { category: "general", text: "Integer underflow in the ProcessCommandsInternal function in dec/decode.c in Brotli, as used in Google Chrome before 48.0.2564.109, allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted data with brotli compression.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1624", url: "https://www.suse.com/security/cve/CVE-2016-1624", }, { category: "external", summary: "SUSE Bug 965999 for CVE-2016-1624", url: "https://bugzilla.suse.com/965999", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-1624", }, { cve: "CVE-2016-1625", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1625", }, ], notes: [ { category: "general", text: "The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page (NTP) navigation target is on the most-visited or suggestions list, which allows remote attackers to bypass intended restrictions via unspecified vectors, related to instant_service.cc and search_tab_helper.cc.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1625", url: "https://www.suse.com/security/cve/CVE-2016-1625", }, { category: "external", summary: "SUSE Bug 965999 for CVE-2016-1625", url: "https://bugzilla.suse.com/965999", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-1625", }, { cve: "CVE-2016-1626", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1626", }, ], notes: [ { category: "general", text: "The opj_pi_update_decode_poc function in pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, miscalculates a certain layer index value, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1626", url: "https://www.suse.com/security/cve/CVE-2016-1626", }, { category: "external", summary: "SUSE Bug 965999 for CVE-2016-1626", url: "https://bugzilla.suse.com/965999", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-1626", }, { cve: "CVE-2016-1627", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1627", }, ], notes: [ { category: "general", text: "The Developer Tools (aka DevTools) subsystem in Google Chrome before 48.0.2564.109 does not validate URL schemes and ensure that the remoteBase parameter is associated with a chrome-devtools-frontend.appspot.com URL, which allows remote attackers to bypass intended access restrictions via a crafted URL, related to browser/devtools/devtools_ui_bindings.cc and WebKit/Source/devtools/front_end/Runtime.js.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1627", url: "https://www.suse.com/security/cve/CVE-2016-1627", }, { category: "external", summary: "SUSE Bug 965999 for CVE-2016-1627", url: "https://bugzilla.suse.com/965999", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-1627", }, { cve: "CVE-2016-1629", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1629", }, ], notes: [ { category: "general", text: "Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1629", url: "https://www.suse.com/security/cve/CVE-2016-1629", }, { category: "external", summary: "SUSE Bug 967376 for CVE-2016-1629", url: "https://bugzilla.suse.com/967376", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-1629", }, { cve: "CVE-2016-1630", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1630", }, ], notes: [ { category: "general", text: "The ContainerNode::parserRemoveChild function in WebKit/Source/core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 49.0.2623.75, mishandles widget updates, which makes it easier for remote attackers to bypass the Same Origin Policy via a crafted web site.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1630", url: "https://www.suse.com/security/cve/CVE-2016-1630", }, { category: "external", summary: "SUSE Bug 969333 for CVE-2016-1630", url: "https://bugzilla.suse.com/969333", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1630", }, { cve: "CVE-2016-1631", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1631", }, ], notes: [ { category: "general", text: "The PPB_Flash_MessageLoop_Impl::InternalRun function in content/renderer/pepper/ppb_flash_message_loop_impl.cc in the Pepper plugin in Google Chrome before 49.0.2623.75 mishandles nested message loops, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1631", url: "https://www.suse.com/security/cve/CVE-2016-1631", }, { category: "external", summary: "SUSE Bug 969333 for CVE-2016-1631", url: "https://bugzilla.suse.com/969333", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1631", }, { cve: "CVE-2016-1632", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1632", }, ], notes: [ { category: "general", text: "The Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly maintain own properties, which allows remote attackers to bypass intended access restrictions via crafted JavaScript code that triggers an incorrect cast, related to extensions/renderer/v8_helpers.h and gin/converter.h.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1632", url: "https://www.suse.com/security/cve/CVE-2016-1632", }, { category: "external", summary: "SUSE Bug 969333 for CVE-2016-1632", url: "https://bugzilla.suse.com/969333", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1632", }, { cve: "CVE-2016-1633", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1633", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in Blink, as used in Google Chrome before 49.0.2623.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1633", url: "https://www.suse.com/security/cve/CVE-2016-1633", }, { category: "external", summary: "SUSE Bug 969333 for CVE-2016-1633", url: "https://bugzilla.suse.com/969333", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-1633", }, { cve: "CVE-2016-1634", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1634", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the StyleResolver::appendCSSStyleSheet function in WebKit/Source/core/css/resolver/StyleResolver.cpp in Blink, as used in Google Chrome before 49.0.2623.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site that triggers Cascading Style Sheets (CSS) style invalidation during a certain subtree-removal action.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1634", url: "https://www.suse.com/security/cve/CVE-2016-1634", }, { category: "external", summary: "SUSE Bug 969333 for CVE-2016-1634", url: "https://bugzilla.suse.com/969333", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-1634", }, { cve: "CVE-2016-1635", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1635", }, ], notes: [ { category: "general", text: "extensions/renderer/render_frame_observer_natives.cc in Google Chrome before 49.0.2623.75 does not properly consider object lifetimes and re-entrancy issues during OnDocumentElementCreated handling, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1635", url: "https://www.suse.com/security/cve/CVE-2016-1635", }, { category: "external", summary: "SUSE Bug 969333 for CVE-2016-1635", url: "https://bugzilla.suse.com/969333", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-1635", }, { cve: "CVE-2016-1636", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1636", }, ], notes: [ { category: "general", text: "The PendingScript::notifyFinished function in WebKit/Source/core/dom/PendingScript.cpp in Google Chrome before 49.0.2623.75 relies on memory-cache information about integrity-check occurrences instead of integrity-check successes, which allows remote attackers to bypass the Subresource Integrity (aka SRI) protection mechanism by triggering two loads of the same resource.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1636", url: "https://www.suse.com/security/cve/CVE-2016-1636", }, { category: "external", summary: "SUSE Bug 969333 for CVE-2016-1636", url: "https://bugzilla.suse.com/969333", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-1636", }, { cve: "CVE-2016-1637", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1637", }, ], notes: [ { category: "general", text: "The SkATan2_255 function in effects/gradients/SkSweepGradient.cpp in Skia, as used in Google Chrome before 49.0.2623.75, mishandles arctangent calculations, which allows remote attackers to obtain sensitive information via a crafted web site.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1637", url: "https://www.suse.com/security/cve/CVE-2016-1637", }, { category: "external", summary: "SUSE Bug 969333 for CVE-2016-1637", url: "https://bugzilla.suse.com/969333", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-1637", }, { cve: "CVE-2016-1638", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1638", }, ], notes: [ { category: "general", text: "extensions/renderer/resources/platform_app.js in the Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly restrict use of Web APIs, which allows remote attackers to bypass intended access restrictions via a crafted platform app.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1638", url: "https://www.suse.com/security/cve/CVE-2016-1638", }, { category: "external", summary: "SUSE Bug 969333 for CVE-2016-1638", url: "https://bugzilla.suse.com/969333", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-1638", }, { cve: "CVE-2016-1639", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1639", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in browser/extensions/api/webrtc_audio_private/webrtc_audio_private_api.cc in the WebRTC Audio Private API implementation in Google Chrome before 49.0.2623.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect reliance on the resource context pointer.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1639", url: "https://www.suse.com/security/cve/CVE-2016-1639", }, { category: "external", summary: "SUSE Bug 969333 for CVE-2016-1639", url: "https://bugzilla.suse.com/969333", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-1639", }, { cve: "CVE-2016-1640", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1640", }, ], notes: [ { category: "general", text: "The Web Store inline-installer implementation in the Extensions UI in Google Chrome before 49.0.2623.75 does not block installations upon deletion of an installation frame, which makes it easier for remote attackers to trick a user into believing that an installation request originated from the user's next navigation target via a crafted web site.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1640", url: "https://www.suse.com/security/cve/CVE-2016-1640", }, { category: "external", summary: "SUSE Bug 969333 for CVE-2016-1640", url: "https://bugzilla.suse.com/969333", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-1640", }, { cve: "CVE-2016-1641", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1641", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 49.0.2623.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering an image download after a certain data structure is deleted, as demonstrated by a favicon.ico download.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1641", url: "https://www.suse.com/security/cve/CVE-2016-1641", }, { category: "external", summary: "SUSE Bug 969333 for CVE-2016-1641", url: "https://bugzilla.suse.com/969333", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-1641", }, { cve: "CVE-2016-1642", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1642", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 49.0.2623.75 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1642", url: "https://www.suse.com/security/cve/CVE-2016-1642", }, { category: "external", summary: "SUSE Bug 969333 for CVE-2016-1642", url: "https://bugzilla.suse.com/969333", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-1642", }, { cve: "CVE-2016-1643", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1643", }, ], notes: [ { category: "general", text: "The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly maintain the user agent shadow DOM, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage \"type confusion.\"", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1643", url: "https://www.suse.com/security/cve/CVE-2016-1643", }, { category: "external", summary: "SUSE Bug 970514 for CVE-2016-1643", url: "https://bugzilla.suse.com/970514", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-1643", }, { cve: "CVE-2016-1644", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1644", }, ], notes: [ { category: "general", text: "WebKit/Source/core/layout/LayoutObject.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly restrict relayout scheduling, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted HTML document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1644", url: "https://www.suse.com/security/cve/CVE-2016-1644", }, { category: "external", summary: "SUSE Bug 970509 for CVE-2016-1644", url: "https://bugzilla.suse.com/970509", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-1644", }, { cve: "CVE-2016-1645", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1645", }, ], notes: [ { category: "general", text: "Multiple integer signedness errors in the opj_j2k_update_image_data function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of service (incorrect cast and out-of-bounds write) or possibly have unspecified other impact via crafted JPEG 2000 data.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1645", url: "https://www.suse.com/security/cve/CVE-2016-1645", }, { category: "external", summary: "SUSE Bug 970511 for CVE-2016-1645", url: "https://bugzilla.suse.com/970511", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-1645", }, { cve: "CVE-2016-1646", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1646", }, ], notes: [ { category: "general", text: "The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted JavaScript code.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1646", url: "https://www.suse.com/security/cve/CVE-2016-1646", }, { category: "external", summary: "SUSE Bug 972834 for CVE-2016-1646", url: "https://bugzilla.suse.com/972834", }, { category: "external", summary: "SUSE Bug 973166 for CVE-2016-1646", url: "https://bugzilla.suse.com/973166", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-1646", }, { cve: "CVE-2016-1647", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1647", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser/renderer_host/render_widget_host_impl.cc in the Navigation implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1647", url: "https://www.suse.com/security/cve/CVE-2016-1647", }, { category: "external", summary: "SUSE Bug 972834 for CVE-2016-1647", url: "https://bugzilla.suse.com/972834", }, { category: "external", summary: "SUSE Bug 973166 for CVE-2016-1647", url: "https://bugzilla.suse.com/973166", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-1647", }, { cve: "CVE-2016-1648", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1648", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes_extension_bindings.cc in the Extensions implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1648", url: "https://www.suse.com/security/cve/CVE-2016-1648", }, { category: "external", summary: "SUSE Bug 972834 for CVE-2016-1648", url: "https://bugzilla.suse.com/972834", }, { category: "external", summary: "SUSE Bug 973166 for CVE-2016-1648", url: "https://bugzilla.suse.com/973166", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-1648", }, { cve: "CVE-2016-1649", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1649", }, ], notes: [ { category: "general", text: "The Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome before 49.0.2623.108, does not properly handle a certain data-type mismatch, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted shader stages.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1649", url: "https://www.suse.com/security/cve/CVE-2016-1649", }, { category: "external", summary: "SUSE Bug 972834 for CVE-2016-1649", url: "https://bugzilla.suse.com/972834", }, { category: "external", summary: "SUSE Bug 973166 for CVE-2016-1649", url: "https://bugzilla.suse.com/973166", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-1649", }, { cve: "CVE-2016-1650", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1650", }, ], notes: [ { category: "general", text: "The PageCaptureSaveAsMHTMLFunction::ReturnFailure function in browser/extensions/api/page_capture/page_capture_api.cc in Google Chrome before 49.0.2623.108 allows attackers to cause a denial of service or possibly have unspecified other impact by triggering an error in creating an MHTML document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1650", url: "https://www.suse.com/security/cve/CVE-2016-1650", }, { category: "external", summary: "SUSE Bug 972834 for CVE-2016-1650", url: "https://bugzilla.suse.com/972834", }, { category: "external", summary: "SUSE Bug 973166 for CVE-2016-1650", url: "https://bugzilla.suse.com/973166", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-1650", }, { cve: "CVE-2016-1651", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1651", }, ], notes: [ { category: "general", text: "fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 50.0.2661.75, does not properly implement the sycc420_to_rgb and sycc422_to_rgb functions, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via crafted JPEG 2000 data in a PDF document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1651", url: "https://www.suse.com/security/cve/CVE-2016-1651", }, { category: "external", summary: "SUSE Bug 975572 for CVE-2016-1651", url: "https://bugzilla.suse.com/975572", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.1, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-1651", }, { cve: "CVE-2016-1652", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1652", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in the ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the Extensions subsystem in Google Chrome before 50.0.2661.75 allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka \"Universal XSS (UXSS).\"", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1652", url: "https://www.suse.com/security/cve/CVE-2016-1652", }, { category: "external", summary: "SUSE Bug 975572 for CVE-2016-1652", url: "https://bugzilla.suse.com/975572", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.1, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-1652", }, { cve: "CVE-2016-1653", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1653", }, ], notes: [ { category: "general", text: "The LoadBuffer implementation in Google V8, as used in Google Chrome before 50.0.2661.75, mishandles data types, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds write operation, related to compiler/pipeline.cc and compiler/simplified-lowering.cc.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1653", url: "https://www.suse.com/security/cve/CVE-2016-1653", }, { category: "external", summary: "SUSE Bug 975572 for CVE-2016-1653", url: "https://bugzilla.suse.com/975572", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-1653", }, { cve: "CVE-2016-1654", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1654", }, ], notes: [ { category: "general", text: "The media subsystem in Google Chrome before 50.0.2661.75 does not initialize an unspecified data structure, which allows remote attackers to cause a denial of service (invalid read operation) via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1654", url: "https://www.suse.com/security/cve/CVE-2016-1654", }, { category: "external", summary: "SUSE Bug 975572 for CVE-2016-1654", url: "https://bugzilla.suse.com/975572", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-1654", }, { cve: "CVE-2016-1655", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1655", }, ], notes: [ { category: "general", text: "Google Chrome before 50.0.2661.75 does not properly consider that frame removal may occur during callback execution, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted extension.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1655", url: "https://www.suse.com/security/cve/CVE-2016-1655", }, { category: "external", summary: "SUSE Bug 975572 for CVE-2016-1655", url: "https://bugzilla.suse.com/975572", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-1655", }, { cve: "CVE-2016-1656", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1656", }, ], notes: [ { category: "general", text: "The download implementation in Google Chrome before 50.0.2661.75 on Android allows remote attackers to bypass intended pathname restrictions via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1656", url: "https://www.suse.com/security/cve/CVE-2016-1656", }, { category: "external", summary: "SUSE Bug 975572 for CVE-2016-1656", url: "https://bugzilla.suse.com/975572", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-1656", }, { cve: "CVE-2016-1657", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1657", }, ], notes: [ { category: "general", text: "The WebContentsImpl::FocusLocationBarByDefault function in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which allows remote attackers to spoof the address bar via a crafted URL.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1657", url: "https://www.suse.com/security/cve/CVE-2016-1657", }, { category: "external", summary: "SUSE Bug 975572 for CVE-2016-1657", url: "https://bugzilla.suse.com/975572", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-1657", }, { cve: "CVE-2016-1658", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1658", }, ], notes: [ { category: "general", text: "The Extensions subsystem in Google Chrome before 50.0.2661.75 incorrectly relies on GetOrigin method calls for origin comparisons, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted extension.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1658", url: "https://www.suse.com/security/cve/CVE-2016-1658", }, { category: "external", summary: "SUSE Bug 975572 for CVE-2016-1658", url: "https://bugzilla.suse.com/975572", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-1658", }, { cve: "CVE-2016-1659", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1659", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.75 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1659", url: "https://www.suse.com/security/cve/CVE-2016-1659", }, { category: "external", summary: "SUSE Bug 975572 for CVE-2016-1659", url: "https://bugzilla.suse.com/975572", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-1659", }, { cve: "CVE-2016-1660", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1660", }, ], notes: [ { category: "general", text: "Blink, as used in Google Chrome before 50.0.2661.94, mishandles assertions in the WTF::BitArray and WTF::double_conversion::Vector classes, which allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted web site.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1660", url: "https://www.suse.com/security/cve/CVE-2016-1660", }, { category: "external", summary: "SUSE Bug 977830 for CVE-2016-1660", url: "https://bugzilla.suse.com/977830", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1660", }, { cve: "CVE-2016-1661", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1661", }, ], notes: [ { category: "general", text: "Blink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check for the same renderer process in addition to a Same Origin Policy check, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted web site, related to BindingSecurity.cpp and DOMWindow.cpp.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1661", url: "https://www.suse.com/security/cve/CVE-2016-1661", }, { category: "external", summary: "SUSE Bug 977830 for CVE-2016-1661", url: "https://bugzilla.suse.com/977830", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1661", }, { cve: "CVE-2016-1662", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1662", }, ], notes: [ { category: "general", text: "extensions/renderer/gc_callback.cc in Google Chrome before 50.0.2661.94 does not prevent fallback execution once the Garbage Collection callback has started, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1662", url: "https://www.suse.com/security/cve/CVE-2016-1662", }, { category: "external", summary: "SUSE Bug 977830 for CVE-2016-1662", url: "https://bugzilla.suse.com/977830", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1662", }, { cve: "CVE-2016-1663", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1663", }, ], notes: [ { category: "general", text: "The SerializedScriptValue::transferArrayBuffers function in WebKit/Source/bindings/core/v8/SerializedScriptValue.cpp in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.94, mishandles certain array-buffer data structures, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1663", url: "https://www.suse.com/security/cve/CVE-2016-1663", }, { category: "external", summary: "SUSE Bug 977830 for CVE-2016-1663", url: "https://bugzilla.suse.com/977830", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1663", }, { cve: "CVE-2016-1664", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1664", }, ], notes: [ { category: "general", text: "The HistoryController::UpdateForCommit function in content/renderer/history_controller.cc in Google Chrome before 50.0.2661.94 mishandles the interaction between subframe forward navigations and other forward navigations, which allows remote attackers to spoof the address bar via a crafted web site.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1664", url: "https://www.suse.com/security/cve/CVE-2016-1664", }, { category: "external", summary: "SUSE Bug 977830 for CVE-2016-1664", url: "https://bugzilla.suse.com/977830", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1664", }, { cve: "CVE-2016-1665", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1665", }, ], notes: [ { category: "general", text: "The JSGenericLowering class in compiler/js-generic-lowering.cc in Google V8, as used in Google Chrome before 50.0.2661.94, mishandles comparison operators, which allows remote attackers to obtain sensitive information via crafted JavaScript code.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1665", url: "https://www.suse.com/security/cve/CVE-2016-1665", }, { category: "external", summary: "SUSE Bug 977830 for CVE-2016-1665", url: "https://bugzilla.suse.com/977830", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1665", }, { cve: "CVE-2016-1666", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1666", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.94 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1666", url: "https://www.suse.com/security/cve/CVE-2016-1666", }, { category: "external", summary: "SUSE Bug 977830 for CVE-2016-1666", url: "https://bugzilla.suse.com/977830", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1666", }, { cve: "CVE-2016-1667", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1667", }, ], notes: [ { category: "general", text: "The TreeScope::adoptIfNeeded function in WebKit/Source/core/dom/TreeScope.cpp in the DOM implementation in Blink, as used in Google Chrome before 50.0.2661.102, does not prevent script execution during node-adoption operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1667", url: "https://www.suse.com/security/cve/CVE-2016-1667", }, { category: "external", summary: "SUSE Bug 979859 for CVE-2016-1667", url: "https://bugzilla.suse.com/979859", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1667", }, { cve: "CVE-2016-1668", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1668", }, ], notes: [ { category: "general", text: "The forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.102, uses an improper creation context, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1668", url: "https://www.suse.com/security/cve/CVE-2016-1668", }, { category: "external", summary: "SUSE Bug 979859 for CVE-2016-1668", url: "https://bugzilla.suse.com/979859", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1668", }, { cve: "CVE-2016-1669", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1669", }, ], notes: [ { category: "general", text: "The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1669", url: "https://www.suse.com/security/cve/CVE-2016-1669", }, { category: "external", summary: "SUSE Bug 979859 for CVE-2016-1669", url: "https://bugzilla.suse.com/979859", }, { category: "external", summary: "SUSE Bug 987919 for CVE-2016-1669", url: "https://bugzilla.suse.com/987919", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1669", }, { cve: "CVE-2016-1670", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1670", }, ], notes: [ { category: "general", text: "Race condition in the ResourceDispatcherHostImpl::BeginRequest function in content/browser/loader/resource_dispatcher_host_impl.cc in Google Chrome before 50.0.2661.102 allows remote attackers to make arbitrary HTTP requests by leveraging access to a renderer process and reusing a request ID.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1670", url: "https://www.suse.com/security/cve/CVE-2016-1670", }, { category: "external", summary: "SUSE Bug 979859 for CVE-2016-1670", url: "https://bugzilla.suse.com/979859", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1670", }, { cve: "CVE-2016-1672", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1672", }, ], notes: [ { category: "general", text: "The ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the extension bindings in Google Chrome before 51.0.2704.63 mishandles properties, which allows remote attackers to conduct bindings-interception attacks and bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1672", url: "https://www.suse.com/security/cve/CVE-2016-1672", }, { category: "external", summary: "SUSE Bug 981886 for CVE-2016-1672", url: "https://bugzilla.suse.com/981886", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1672", }, { cve: "CVE-2016-1673", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1673", }, ], notes: [ { category: "general", text: "Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1673", url: "https://www.suse.com/security/cve/CVE-2016-1673", }, { category: "external", summary: "SUSE Bug 981886 for CVE-2016-1673", url: "https://bugzilla.suse.com/981886", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1673", }, { cve: "CVE-2016-1674", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1674", }, ], notes: [ { category: "general", text: "The extensions subsystem in Google Chrome before 51.0.2704.63 allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1674", url: "https://www.suse.com/security/cve/CVE-2016-1674", }, { category: "external", summary: "SUSE Bug 981886 for CVE-2016-1674", url: "https://bugzilla.suse.com/981886", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1674", }, { cve: "CVE-2016-1675", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1675", }, ], notes: [ { category: "general", text: "Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy by leveraging the mishandling of Document reattachment during destruction, related to FrameLoader.cpp and LocalFrame.cpp.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1675", url: "https://www.suse.com/security/cve/CVE-2016-1675", }, { category: "external", summary: "SUSE Bug 981886 for CVE-2016-1675", url: "https://bugzilla.suse.com/981886", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1675", }, { cve: "CVE-2016-1676", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1676", }, ], notes: [ { category: "general", text: "extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.63 does not properly use prototypes, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1676", url: "https://www.suse.com/security/cve/CVE-2016-1676", }, { category: "external", summary: "SUSE Bug 981886 for CVE-2016-1676", url: "https://bugzilla.suse.com/981886", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1676", }, { cve: "CVE-2016-1677", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1677", }, ], notes: [ { category: "general", text: "uri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an incorrect array type, which allows remote attackers to obtain sensitive information by calling the decodeURI function and leveraging \"type confusion.\"", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1677", url: "https://www.suse.com/security/cve/CVE-2016-1677", }, { category: "external", summary: "SUSE Bug 981886 for CVE-2016-1677", url: "https://bugzilla.suse.com/981886", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1677", }, { cve: "CVE-2016-1678", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1678", }, ], notes: [ { category: "general", text: "objects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not properly restrict lazy deoptimization, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1678", url: "https://www.suse.com/security/cve/CVE-2016-1678", }, { category: "external", summary: "SUSE Bug 981886 for CVE-2016-1678", url: "https://bugzilla.suse.com/981886", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1678", }, { cve: "CVE-2016-1679", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1679", }, ], notes: [ { category: "general", text: "The ToV8Value function in content/child/v8_value_converter_impl.cc in the V8 bindings in Google Chrome before 51.0.2704.63 does not properly restrict use of getters and setters, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1679", url: "https://www.suse.com/security/cve/CVE-2016-1679", }, { category: "external", summary: "SUSE Bug 981886 for CVE-2016-1679", url: "https://bugzilla.suse.com/981886", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1679", }, { cve: "CVE-2016-1680", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1680", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in ports/SkFontHost_FreeType.cpp in Skia, as used in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1680", url: "https://www.suse.com/security/cve/CVE-2016-1680", }, { category: "external", summary: "SUSE Bug 981886 for CVE-2016-1680", url: "https://bugzilla.suse.com/981886", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1680", }, { cve: "CVE-2016-1681", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1681", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in the opj_j2k_read_SPCod_SPCoc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1681", url: "https://www.suse.com/security/cve/CVE-2016-1681", }, { category: "external", summary: "SUSE Bug 981886 for CVE-2016-1681", url: "https://bugzilla.suse.com/981886", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1681", }, { cve: "CVE-2016-1682", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1682", }, ], notes: [ { category: "general", text: "The ServiceWorkerContainer::registerServiceWorkerImpl function in WebKit/Source/modules/serviceworkers/ServiceWorkerContainer.cpp in Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via a ServiceWorker registration.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1682", url: "https://www.suse.com/security/cve/CVE-2016-1682", }, { category: "external", summary: "SUSE Bug 981886 for CVE-2016-1682", url: "https://bugzilla.suse.com/981886", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.1, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1682", }, { cve: "CVE-2016-1683", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1683", }, ], notes: [ { category: "general", text: "numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles namespace nodes, which allows remote attackers to cause a denial of service (out-of-bounds heap memory access) or possibly have unspecified other impact via a crafted document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1683", url: "https://www.suse.com/security/cve/CVE-2016-1683", }, { category: "external", summary: "SUSE Bug 981886 for CVE-2016-1683", url: "https://bugzilla.suse.com/981886", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1683", }, { cve: "CVE-2016-1684", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1684", }, ], notes: [ { category: "general", text: "numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the i format token for xsl:number data, which allows remote attackers to cause a denial of service (integer overflow or resource consumption) or possibly have unspecified other impact via a crafted document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1684", url: "https://www.suse.com/security/cve/CVE-2016-1684", }, { category: "external", summary: "SUSE Bug 981886 for CVE-2016-1684", url: "https://bugzilla.suse.com/981886", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1684", }, { cve: "CVE-2016-1685", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1685", }, ], notes: [ { category: "general", text: "core/fxge/ge/fx_ge_text.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, miscalculates certain index values, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1685", url: "https://www.suse.com/security/cve/CVE-2016-1685", }, { category: "external", summary: "SUSE Bug 981886 for CVE-2016-1685", url: "https://bugzilla.suse.com/981886", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1685", }, { cve: "CVE-2016-1686", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1686", }, ], notes: [ { category: "general", text: "The CPDF_DIBSource::CreateDecoder function in core/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, mishandles decoder-initialization failure, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1686", url: "https://www.suse.com/security/cve/CVE-2016-1686", }, { category: "external", summary: "SUSE Bug 981886 for CVE-2016-1686", url: "https://bugzilla.suse.com/981886", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1686", }, { cve: "CVE-2016-1687", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1687", }, ], notes: [ { category: "general", text: "The renderer implementation in Google Chrome before 51.0.2704.63 does not properly restrict public exposure of classes, which allows remote attackers to obtain sensitive information via vectors related to extensions.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1687", url: "https://www.suse.com/security/cve/CVE-2016-1687", }, { category: "external", summary: "SUSE Bug 981886 for CVE-2016-1687", url: "https://bugzilla.suse.com/981886", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1687", }, { cve: "CVE-2016-1688", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1688", }, ], notes: [ { category: "general", text: "The regexp (aka regular expression) implementation in Google V8 before 5.0.71.40, as used in Google Chrome before 51.0.2704.63, mishandles external string sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted JavaScript code.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1688", url: "https://www.suse.com/security/cve/CVE-2016-1688", }, { category: "external", summary: "SUSE Bug 981886 for CVE-2016-1688", url: "https://bugzilla.suse.com/981886", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1688", }, { cve: "CVE-2016-1689", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1689", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in content/renderer/media/canvas_capture_handler.cc in Google Chrome before 51.0.2704.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1689", url: "https://www.suse.com/security/cve/CVE-2016-1689", }, { category: "external", summary: "SUSE Bug 981886 for CVE-2016-1689", url: "https://bugzilla.suse.com/981886", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1689", }, { cve: "CVE-2016-1690", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1690", }, ], notes: [ { category: "general", text: "The Autofill implementation in Google Chrome before 51.0.2704.63 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site, a different vulnerability than CVE-2016-1701.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1690", url: "https://www.suse.com/security/cve/CVE-2016-1690", }, { category: "external", summary: "SUSE Bug 981886 for CVE-2016-1690", url: "https://bugzilla.suse.com/981886", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1690", }, { cve: "CVE-2016-1691", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1691", }, ], notes: [ { category: "general", text: "Skia, as used in Google Chrome before 51.0.2704.63, mishandles coincidence runs, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted curves, related to SkOpCoincidence.cpp and SkPathOpsCommon.cpp.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1691", url: "https://www.suse.com/security/cve/CVE-2016-1691", }, { category: "external", summary: "SUSE Bug 981886 for CVE-2016-1691", url: "https://bugzilla.suse.com/981886", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1691", }, { cve: "CVE-2016-1692", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1692", }, ], notes: [ { category: "general", text: "WebKit/Source/core/css/StyleSheetContents.cpp in Blink, as used in Google Chrome before 51.0.2704.63, permits cross-origin loading of CSS stylesheets by a ServiceWorker even when the stylesheet download has an incorrect MIME type, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1692", url: "https://www.suse.com/security/cve/CVE-2016-1692", }, { category: "external", summary: "SUSE Bug 981886 for CVE-2016-1692", url: "https://bugzilla.suse.com/981886", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1692", }, { cve: "CVE-2016-1693", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1693", }, ], notes: [ { category: "general", text: "browser/safe_browsing/srt_field_trial_win.cc in Google Chrome before 51.0.2704.63 does not use the HTTPS service on dl.google.com to obtain the Software Removal Tool, which allows remote attackers to spoof the chrome_cleanup_tool.exe (aka CCT) file via a man-in-the-middle attack on an HTTP session.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1693", url: "https://www.suse.com/security/cve/CVE-2016-1693", }, { category: "external", summary: "SUSE Bug 981886 for CVE-2016-1693", url: "https://bugzilla.suse.com/981886", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1693", }, { cve: "CVE-2016-1694", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1694", }, ], notes: [ { category: "general", text: "browser/browsing_data/browsing_data_remover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid certificate from an arbitrary recognized Certification Authority.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1694", url: "https://www.suse.com/security/cve/CVE-2016-1694", }, { category: "external", summary: "SUSE Bug 981886 for CVE-2016-1694", url: "https://bugzilla.suse.com/981886", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1694", }, { cve: "CVE-2016-1695", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1695", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.63 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1695", url: "https://www.suse.com/security/cve/CVE-2016-1695", }, { category: "external", summary: "SUSE Bug 981886 for CVE-2016-1695", url: "https://bugzilla.suse.com/981886", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1695", }, { cve: "CVE-2016-1696", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1696", }, ], notes: [ { category: "general", text: "The extensions subsystem in Google Chrome before 51.0.2704.79 does not properly restrict bindings access, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1696", url: "https://www.suse.com/security/cve/CVE-2016-1696", }, { category: "external", summary: "SUSE Bug 982719 for CVE-2016-1696", url: "https://bugzilla.suse.com/982719", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1696", }, { cve: "CVE-2016-1697", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1697", }, ], notes: [ { category: "general", text: "The FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 51.0.2704.79, does not prevent frame navigations during DocumentLoader detach operations, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1697", url: "https://www.suse.com/security/cve/CVE-2016-1697", }, { category: "external", summary: "SUSE Bug 982719 for CVE-2016-1697", url: "https://bugzilla.suse.com/982719", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1697", }, { cve: "CVE-2016-1698", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1698", }, ], notes: [ { category: "general", text: "The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which might allow attackers to load arbitrary modules or obtain sensitive information by leveraging a poisoned definition.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1698", url: "https://www.suse.com/security/cve/CVE-2016-1698", }, { category: "external", summary: "SUSE Bug 982719 for CVE-2016-1698", url: "https://bugzilla.suse.com/982719", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-1698", }, { cve: "CVE-2016-1699", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1699", }, ], notes: [ { category: "general", text: "WebKit/Source/devtools/front_end/devtools.js in the Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 51.0.2704.79, does not ensure that the remoteFrontendUrl parameter is associated with a chrome-devtools-frontend.appspot.com URL, which allows remote attackers to bypass intended access restrictions via a crafted URL.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1699", url: "https://www.suse.com/security/cve/CVE-2016-1699", }, { category: "external", summary: "SUSE Bug 982719 for CVE-2016-1699", url: "https://bugzilla.suse.com/982719", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-1699", }, { cve: "CVE-2016-1700", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1700", }, ], notes: [ { category: "general", text: "extensions/renderer/runtime_custom_bindings.cc in Google Chrome before 51.0.2704.79 does not consider side effects during creation of an array of extension views, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors related to extensions.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1700", url: "https://www.suse.com/security/cve/CVE-2016-1700", }, { category: "external", summary: "SUSE Bug 982719 for CVE-2016-1700", url: "https://bugzilla.suse.com/982719", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1700", }, { cve: "CVE-2016-1701", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1701", }, ], notes: [ { category: "general", text: "The Autofill implementation in Google Chrome before 51.0.2704.79 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site, a different vulnerability than CVE-2016-1690.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1701", url: "https://www.suse.com/security/cve/CVE-2016-1701", }, { category: "external", summary: "SUSE Bug 982719 for CVE-2016-1701", url: "https://bugzilla.suse.com/982719", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1701", }, { cve: "CVE-2016-1702", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1702", }, ], notes: [ { category: "general", text: "The SkRegion::readFromMemory function in core/SkRegion.cpp in Skia, as used in Google Chrome before 51.0.2704.79, does not validate the interval count, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted serialized data.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1702", url: "https://www.suse.com/security/cve/CVE-2016-1702", }, { category: "external", summary: "SUSE Bug 982719 for CVE-2016-1702", url: "https://bugzilla.suse.com/982719", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-1702", }, { cve: "CVE-2016-1703", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1703", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.79 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1703", url: "https://www.suse.com/security/cve/CVE-2016-1703", }, { category: "external", summary: "SUSE Bug 982719 for CVE-2016-1703", url: "https://bugzilla.suse.com/982719", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1703", }, { cve: "CVE-2016-1704", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1704", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.103 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1704", url: "https://www.suse.com/security/cve/CVE-2016-1704", }, { category: "external", summary: "SUSE Bug 985397 for CVE-2016-1704", url: "https://bugzilla.suse.com/985397", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-1704", }, { cve: "CVE-2016-1705", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1705", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 52.0.2743.82 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1705", url: "https://www.suse.com/security/cve/CVE-2016-1705", }, { category: "external", summary: "SUSE Bug 989901 for CVE-2016-1705", url: "https://bugzilla.suse.com/989901", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1705", }, { cve: "CVE-2016-1706", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1706", }, ], notes: [ { category: "general", text: "The PPAPI implementation in Google Chrome before 52.0.2743.82 does not validate the origin of IPC messages to the plugin broker process that should have come from the browser process, which allows remote attackers to bypass a sandbox protection mechanism via an unexpected message type, related to broker_process_dispatcher.cc, ppapi_plugin_process_host.cc, ppapi_thread.cc, and render_frame_message_filter.cc.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1706", url: "https://www.suse.com/security/cve/CVE-2016-1706", }, { category: "external", summary: "SUSE Bug 989901 for CVE-2016-1706", url: "https://bugzilla.suse.com/989901", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.6, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1706", }, { cve: "CVE-2016-1707", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1707", }, ], notes: [ { category: "general", text: "ios/web/web_state/ui/crw_web_controller.mm in Google Chrome before 52.0.2743.82 on iOS does not ensure that an invalid URL is replaced with the about:blank URL, which allows remote attackers to spoof the URL display via a crafted web site.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1707", url: "https://www.suse.com/security/cve/CVE-2016-1707", }, { category: "external", summary: "SUSE Bug 989901 for CVE-2016-1707", url: "https://bugzilla.suse.com/989901", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1707", }, { cve: "CVE-2016-1708", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1708", }, ], notes: [ { category: "general", text: "The Chrome Web Store inline-installation implementation in the Extensions subsystem in Google Chrome before 52.0.2743.82 does not properly consider object lifetimes during progress observation, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1708", url: "https://www.suse.com/security/cve/CVE-2016-1708", }, { category: "external", summary: "SUSE Bug 989901 for CVE-2016-1708", url: "https://bugzilla.suse.com/989901", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1708", }, { cve: "CVE-2016-1709", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1709", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in the ByteArray::Get method in data/byte_array.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1709", url: "https://www.suse.com/security/cve/CVE-2016-1709", }, { category: "external", summary: "SUSE Bug 989901 for CVE-2016-1709", url: "https://bugzilla.suse.com/989901", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1709", }, { cve: "CVE-2016-1710", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1710", }, ], notes: [ { category: "general", text: "The ChromeClientImpl::createWindow method in WebKit/Source/web/ChromeClientImpl.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not prevent window creation by a deferred frame, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1710", url: "https://www.suse.com/security/cve/CVE-2016-1710", }, { category: "external", summary: "SUSE Bug 989901 for CVE-2016-1710", url: "https://bugzilla.suse.com/989901", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1710", }, { cve: "CVE-2016-1711", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-1711", }, ], notes: [ { category: "general", text: "WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not disable frame navigation during a detach operation on a DocumentLoader object, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-1711", url: "https://www.suse.com/security/cve/CVE-2016-1711", }, { category: "external", summary: "SUSE Bug 989901 for CVE-2016-1711", url: "https://bugzilla.suse.com/989901", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-1711", }, { cve: "CVE-2016-3679", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-3679", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google V8 before 4.9.385.33, as used in Google Chrome before 49.0.2623.108, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-3679", url: "https://www.suse.com/security/cve/CVE-2016-3679", }, { category: "external", summary: "SUSE Bug 972834 for CVE-2016-3679", url: "https://bugzilla.suse.com/972834", }, { category: "external", summary: "SUSE Bug 973166 for CVE-2016-3679", url: "https://bugzilla.suse.com/973166", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-3679", }, { cve: "CVE-2016-5127", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5127", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in WebKit/Source/core/editing/VisibleUnits.cpp in Blink, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code involving an @import at-rule in a Cascading Style Sheets (CSS) token sequence in conjunction with a rel=import attribute of a LINK element.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5127", url: "https://www.suse.com/security/cve/CVE-2016-5127", }, { category: "external", summary: "SUSE Bug 989901 for CVE-2016-5127", url: "https://bugzilla.suse.com/989901", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5127", }, { cve: "CVE-2016-5128", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5128", }, ], notes: [ { category: "general", text: "objects.cc in Google V8 before 5.2.361.27, as used in Google Chrome before 52.0.2743.82, does not prevent API interceptors from modifying a store target without setting a property, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5128", url: "https://www.suse.com/security/cve/CVE-2016-5128", }, { category: "external", summary: "SUSE Bug 989901 for CVE-2016-5128", url: "https://bugzilla.suse.com/989901", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5128", }, { cve: "CVE-2016-5129", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5129", }, ], notes: [ { category: "general", text: "Google V8 before 5.2.361.32, as used in Google Chrome before 52.0.2743.82, does not properly process left-trimmed objects, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5129", url: "https://www.suse.com/security/cve/CVE-2016-5129", }, { category: "external", summary: "SUSE Bug 989901 for CVE-2016-5129", url: "https://bugzilla.suse.com/989901", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5129", }, { cve: "CVE-2016-5130", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5130", }, ], notes: [ { category: "general", text: "content/renderer/history_controller.cc in Google Chrome before 52.0.2743.82 does not properly restrict multiple uses of a JavaScript forward method, which allows remote attackers to spoof the URL display via a crafted web site.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5130", url: "https://www.suse.com/security/cve/CVE-2016-5130", }, { category: "external", summary: "SUSE Bug 989901 for CVE-2016-5130", url: "https://bugzilla.suse.com/989901", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5130", }, { cve: "CVE-2016-5131", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5131", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5131", url: "https://www.suse.com/security/cve/CVE-2016-5131", }, { category: "external", summary: "SUSE Bug 1014873 for CVE-2016-5131", url: "https://bugzilla.suse.com/1014873", }, { category: "external", summary: "SUSE Bug 1069433 for CVE-2016-5131", url: "https://bugzilla.suse.com/1069433", }, { category: "external", summary: "SUSE Bug 1078813 for CVE-2016-5131", url: "https://bugzilla.suse.com/1078813", }, { category: "external", summary: "SUSE Bug 1123919 for CVE-2016-5131", url: "https://bugzilla.suse.com/1123919", }, { category: "external", summary: "SUSE Bug 989901 for CVE-2016-5131", url: "https://bugzilla.suse.com/989901", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5131", }, { cve: "CVE-2016-5132", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5132", }, ], notes: [ { category: "general", text: "The Service Workers subsystem in Google Chrome before 52.0.2743.82 does not properly implement the Secure Contexts specification during decisions about whether to control a subframe, which allows remote attackers to bypass the Same Origin Policy via an https IFRAME element inside an http IFRAME element.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5132", url: "https://www.suse.com/security/cve/CVE-2016-5132", }, { category: "external", summary: "SUSE Bug 989901 for CVE-2016-5132", url: "https://bugzilla.suse.com/989901", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5132", }, { cve: "CVE-2016-5133", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5133", }, ], notes: [ { category: "general", text: "Google Chrome before 52.0.2743.82 mishandles origin information during proxy authentication, which allows man-in-the-middle attackers to spoof a proxy-authentication login prompt or trigger incorrect credential storage by modifying the client-server data stream.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5133", url: "https://www.suse.com/security/cve/CVE-2016-5133", }, { category: "external", summary: "SUSE Bug 989901 for CVE-2016-5133", url: "https://bugzilla.suse.com/989901", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5133", }, { cve: "CVE-2016-5134", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5134", }, ], notes: [ { category: "general", text: "net/proxy/proxy_service.cc in the Proxy Auto-Config (PAC) feature in Google Chrome before 52.0.2743.82 does not ensure that URL information is restricted to a scheme, host, and port, which allows remote attackers to discover credentials by operating a server with a PAC script, a related issue to CVE-2016-3763.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5134", url: "https://www.suse.com/security/cve/CVE-2016-5134", }, { category: "external", summary: "SUSE Bug 989901 for CVE-2016-5134", url: "https://bugzilla.suse.com/989901", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5134", }, { cve: "CVE-2016-5135", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5135", }, ], notes: [ { category: "general", text: "WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not consider referrer-policy information inside an HTML document during a preload request, which allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via a crafted web site, as demonstrated by a \"Content-Security-Policy: referrer origin-when-cross-origin\" header that overrides a \"<META name='referrer' content='no-referrer'>\" element.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5135", url: "https://www.suse.com/security/cve/CVE-2016-5135", }, { category: "external", summary: "SUSE Bug 989901 for CVE-2016-5135", url: "https://bugzilla.suse.com/989901", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5135", }, { cve: "CVE-2016-5136", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5136", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in extensions/renderer/user_script_injector.cc in the Extensions subsystem in Google Chrome before 52.0.2743.82 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to script deletion.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5136", url: "https://www.suse.com/security/cve/CVE-2016-5136", }, { category: "external", summary: "SUSE Bug 989901 for CVE-2016-5136", url: "https://bugzilla.suse.com/989901", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5136", }, { cve: "CVE-2016-5137", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5137", }, ], notes: [ { category: "general", text: "The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 52.0.2743.82, does not apply http :80 policies to https :443 URLs and does not apply ws :80 policies to wss :443 URLs, which makes it easier for remote attackers to determine whether a specific HSTS web site has been visited by reading a CSP report. NOTE: this vulnerability is associated with a specification change after CVE-2016-1617 resolution.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5137", url: "https://www.suse.com/security/cve/CVE-2016-5137", }, { category: "external", summary: "SUSE Bug 989901 for CVE-2016-5137", url: "https://bugzilla.suse.com/989901", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5137", }, { cve: "CVE-2016-5139", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5139", }, ], notes: [ { category: "general", text: "Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5139", url: "https://www.suse.com/security/cve/CVE-2016-5139", }, { category: "external", summary: "SUSE Bug 992305 for CVE-2016-5139", url: "https://bugzilla.suse.com/992305", }, { category: "external", summary: "SUSE Bug 992311 for CVE-2016-5139", url: "https://bugzilla.suse.com/992311", }, { category: "external", summary: "SUSE Bug 992325 for CVE-2016-5139", url: "https://bugzilla.suse.com/992325", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.6, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-5139", }, { cve: "CVE-2016-5140", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5140", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in the opj_j2k_read_SQcd_SQcc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JPEG 2000 data.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5140", url: "https://www.suse.com/security/cve/CVE-2016-5140", }, { category: "external", summary: "SUSE Bug 992305 for CVE-2016-5140", url: "https://bugzilla.suse.com/992305", }, { category: "external", summary: "SUSE Bug 992310 for CVE-2016-5140", url: "https://bugzilla.suse.com/992310", }, { category: "external", summary: "SUSE Bug 992325 for CVE-2016-5140", url: "https://bugzilla.suse.com/992325", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-5140", }, { cve: "CVE-2016-5141", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5141", }, ], notes: [ { category: "general", text: "Blink, as used in Google Chrome before 52.0.2743.116, allows remote attackers to spoof the address bar via vectors involving a provisional URL for an initially empty document, related to FrameLoader.cpp and ScopedPageLoadDeferrer.cpp.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5141", url: "https://www.suse.com/security/cve/CVE-2016-5141", }, { category: "external", summary: "SUSE Bug 992305 for CVE-2016-5141", url: "https://bugzilla.suse.com/992305", }, { category: "external", summary: "SUSE Bug 992314 for CVE-2016-5141", url: "https://bugzilla.suse.com/992314", }, { category: "external", summary: "SUSE Bug 992325 for CVE-2016-5141", url: "https://bugzilla.suse.com/992325", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-5141", }, { cve: "CVE-2016-5142", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5142", }, ], notes: [ { category: "general", text: "The Web Cryptography API (aka WebCrypto) implementation in Blink, as used in Google Chrome before 52.0.2743.116, does not properly copy data buffers, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code, related to NormalizeAlgorithm.cpp and SubtleCrypto.cpp.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5142", url: "https://www.suse.com/security/cve/CVE-2016-5142", }, { category: "external", summary: "SUSE Bug 992305 for CVE-2016-5142", url: "https://bugzilla.suse.com/992305", }, { category: "external", summary: "SUSE Bug 992313 for CVE-2016-5142", url: "https://bugzilla.suse.com/992313", }, { category: "external", summary: "SUSE Bug 992325 for CVE-2016-5142", url: "https://bugzilla.suse.com/992325", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-5142", }, { cve: "CVE-2016-5143", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5143", }, ], notes: [ { category: "general", text: "The Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 52.0.2743.116, mishandles the script-path hostname, remoteBase parameter, and remoteFrontendUrl parameter, which allows remote attackers to bypass intended access restrictions via a crafted URL, a different vulnerability than CVE-2016-5144.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5143", url: "https://www.suse.com/security/cve/CVE-2016-5143", }, { category: "external", summary: "SUSE Bug 992305 for CVE-2016-5143", url: "https://bugzilla.suse.com/992305", }, { category: "external", summary: "SUSE Bug 992319 for CVE-2016-5143", url: "https://bugzilla.suse.com/992319", }, { category: "external", summary: "SUSE Bug 992325 for CVE-2016-5143", url: "https://bugzilla.suse.com/992325", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-5143", }, { cve: "CVE-2016-5144", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5144", }, ], notes: [ { category: "general", text: "The Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 52.0.2743.116, mishandles the script-path hostname, remoteBase parameter, and remoteFrontendUrl parameter, which allows remote attackers to bypass intended access restrictions via a crafted URL, a different vulnerability than CVE-2016-5143.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5144", url: "https://www.suse.com/security/cve/CVE-2016-5144", }, { category: "external", summary: "SUSE Bug 992305 for CVE-2016-5144", url: "https://bugzilla.suse.com/992305", }, { category: "external", summary: "SUSE Bug 992315 for CVE-2016-5144", url: "https://bugzilla.suse.com/992315", }, { category: "external", summary: "SUSE Bug 992325 for CVE-2016-5144", url: "https://bugzilla.suse.com/992325", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-5144", }, { cve: "CVE-2016-5145", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5145", }, ], notes: [ { category: "general", text: "Blink, as used in Google Chrome before 52.0.2743.116, does not ensure that a taint property is preserved after a structure-clone operation on an ImageBitmap object derived from a cross-origin image, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5145", url: "https://www.suse.com/security/cve/CVE-2016-5145", }, { category: "external", summary: "SUSE Bug 992305 for CVE-2016-5145", url: "https://bugzilla.suse.com/992305", }, { category: "external", summary: "SUSE Bug 992320 for CVE-2016-5145", url: "https://bugzilla.suse.com/992320", }, { category: "external", summary: "SUSE Bug 992325 for CVE-2016-5145", url: "https://bugzilla.suse.com/992325", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-5145", }, { cve: "CVE-2016-5146", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5146", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 52.0.2743.116 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5146", url: "https://www.suse.com/security/cve/CVE-2016-5146", }, { category: "external", summary: "SUSE Bug 992305 for CVE-2016-5146", url: "https://bugzilla.suse.com/992305", }, { category: "external", summary: "SUSE Bug 992309 for CVE-2016-5146", url: "https://bugzilla.suse.com/992309", }, { category: "external", summary: "SUSE Bug 992325 for CVE-2016-5146", url: "https://bugzilla.suse.com/992325", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-5146", }, { cve: "CVE-2016-5147", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5147", }, ], notes: [ { category: "general", text: "Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles deferred page loads, which allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka \"Universal XSS (UXSS).\"", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5147", url: "https://www.suse.com/security/cve/CVE-2016-5147", }, { category: "external", summary: "SUSE Bug 996648 for CVE-2016-5147", url: "https://bugzilla.suse.com/996648", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.1, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5147", }, { cve: "CVE-2016-5148", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5148", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML via vectors related to widget updates, aka \"Universal XSS (UXSS).\"", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5148", url: "https://www.suse.com/security/cve/CVE-2016-5148", }, { category: "external", summary: "SUSE Bug 996648 for CVE-2016-5148", url: "https://bugzilla.suse.com/996648", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.1, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5148", }, { cve: "CVE-2016-5149", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5149", }, ], notes: [ { category: "general", text: "The extensions subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux relies on an IFRAME source URL to identify an associated extension, which allows remote attackers to conduct extension-bindings injection attacks by leveraging script access to a resource that initially has the about:blank URL.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5149", url: "https://www.suse.com/security/cve/CVE-2016-5149", }, { category: "external", summary: "SUSE Bug 996648 for CVE-2016-5149", url: "https://bugzilla.suse.com/996648", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5149", }, { cve: "CVE-2016-5150", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5150", }, ], notes: [ { category: "general", text: "WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, has an Indexed Database (aka IndexedDB) API implementation that does not properly restrict key-path evaluation, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code that leverages certain side effects.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5150", url: "https://www.suse.com/security/cve/CVE-2016-5150", }, { category: "external", summary: "SUSE Bug 996648 for CVE-2016-5150", url: "https://bugzilla.suse.com/996648", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5150", }, { cve: "CVE-2016-5151", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5151", }, ], notes: [ { category: "general", text: "PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux mishandles timers, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted PDF document, related to fpdfsdk/javascript/JS_Object.cpp and fpdfsdk/javascript/app.cpp.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5151", url: "https://www.suse.com/security/cve/CVE-2016-5151", }, { category: "external", summary: "SUSE Bug 996648 for CVE-2016-5151", url: "https://bugzilla.suse.com/996648", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5151", }, { cve: "CVE-2016-5152", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5152", }, ], notes: [ { category: "general", text: "Integer overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5152", url: "https://www.suse.com/security/cve/CVE-2016-5152", }, { category: "external", summary: "SUSE Bug 996648 for CVE-2016-5152", url: "https://bugzilla.suse.com/996648", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5152", }, { cve: "CVE-2016-5153", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5153", }, ], notes: [ { category: "general", text: "The Web Animations implementation in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, improperly relies on list iteration, which allows remote attackers to cause a denial of service (use-after-destruction) or possibly have unspecified other impact via a crafted web site.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5153", url: "https://www.suse.com/security/cve/CVE-2016-5153", }, { category: "external", summary: "SUSE Bug 996648 for CVE-2016-5153", url: "https://bugzilla.suse.com/996648", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5153", }, { cve: "CVE-2016-5154", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5154", }, ], notes: [ { category: "general", text: "Multiple heap-based buffer overflows in PDFium, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JBig2 image.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5154", url: "https://www.suse.com/security/cve/CVE-2016-5154", }, { category: "external", summary: "SUSE Bug 996648 for CVE-2016-5154", url: "https://bugzilla.suse.com/996648", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5154", }, { cve: "CVE-2016-5155", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5155", }, ], notes: [ { category: "general", text: "Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly validate access to the initial document, which allows remote attackers to spoof the address bar via a crafted web site.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5155", url: "https://www.suse.com/security/cve/CVE-2016-5155", }, { category: "external", summary: "SUSE Bug 996648 for CVE-2016-5155", url: "https://bugzilla.suse.com/996648", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5155", }, { cve: "CVE-2016-5156", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5156", }, ], notes: [ { category: "general", text: "extensions/renderer/event_bindings.cc in the event bindings in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux attempts to process filtered events after failure to add an event matcher, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5156", url: "https://www.suse.com/security/cve/CVE-2016-5156", }, { category: "external", summary: "SUSE Bug 996648 for CVE-2016-5156", url: "https://bugzilla.suse.com/996648", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5156", }, { cve: "CVE-2016-5157", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5157", }, ], notes: [ { category: "general", text: "Heap-based buffer overflow in the opj_dwt_interleave_v function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to execute arbitrary code via crafted coordinate values in JPEG 2000 data.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5157", url: "https://www.suse.com/security/cve/CVE-2016-5157", }, { category: "external", summary: "SUSE Bug 996648 for CVE-2016-5157", url: "https://bugzilla.suse.com/996648", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5157", }, { cve: "CVE-2016-5158", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5158", }, ], notes: [ { category: "general", text: "Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5158", url: "https://www.suse.com/security/cve/CVE-2016-5158", }, { category: "external", summary: "SUSE Bug 996648 for CVE-2016-5158", url: "https://bugzilla.suse.com/996648", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5158", }, { cve: "CVE-2016-5159", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5159", }, ], notes: [ { category: "general", text: "Multiple integer overflows in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data that is mishandled during opj_aligned_malloc calls in dwt.c and t1.c.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5159", url: "https://www.suse.com/security/cve/CVE-2016-5159", }, { category: "external", summary: "SUSE Bug 996648 for CVE-2016-5159", url: "https://bugzilla.suse.com/996648", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5159", }, { cve: "CVE-2016-5160", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5160", }, ], notes: [ { category: "general", text: "The AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly use an extension's manifest.json web_accessible_resources field for restrictions on IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks, and trick users into changing extension settings, via a crafted web site, a different vulnerability than CVE-2016-5162.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5160", url: "https://www.suse.com/security/cve/CVE-2016-5160", }, { category: "external", summary: "SUSE Bug 996648 for CVE-2016-5160", url: "https://bugzilla.suse.com/996648", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5160", }, { cve: "CVE-2016-5161", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5161", }, ], notes: [ { category: "general", text: "The EditingStyle::mergeStyle function in WebKit/Source/core/editing/EditingStyle.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles custom properties, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site that leverages \"type confusion\" in the StylePropertySerializer class.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5161", url: "https://www.suse.com/security/cve/CVE-2016-5161", }, { category: "external", summary: "SUSE Bug 996648 for CVE-2016-5161", url: "https://bugzilla.suse.com/996648", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5161", }, { cve: "CVE-2016-5162", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5162", }, ], notes: [ { category: "general", text: "The AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly use an extension's manifest.json web_accessible_resources field for restrictions on IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks, and trick users into changing extension settings, via a crafted web site, a different vulnerability than CVE-2016-5160.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5162", url: "https://www.suse.com/security/cve/CVE-2016-5162", }, { category: "external", summary: "SUSE Bug 996648 for CVE-2016-5162", url: "https://bugzilla.suse.com/996648", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5162", }, { cve: "CVE-2016-5163", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5163", }, ], notes: [ { category: "general", text: "The bidirectional-text implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not ensure left-to-right (LTR) rendering of URLs, which allows remote attackers to spoof the address bar via crafted right-to-left (RTL) Unicode text, related to omnibox/SuggestionView.java and omnibox/UrlBar.java in Chrome for Android.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5163", url: "https://www.suse.com/security/cve/CVE-2016-5163", }, { category: "external", summary: "SUSE Bug 996648 for CVE-2016-5163", url: "https://bugzilla.suse.com/996648", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5163", }, { cve: "CVE-2016-5164", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5164", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in WebKit/Source/platform/v8_inspector/V8Debugger.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML into the Developer Tools (aka DevTools) subsystem via a crafted web site, aka \"Universal XSS (UXSS).\"", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5164", url: "https://www.suse.com/security/cve/CVE-2016-5164", }, { category: "external", summary: "SUSE Bug 996648 for CVE-2016-5164", url: "https://bugzilla.suse.com/996648", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.1, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5164", }, { cve: "CVE-2016-5165", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5165", }, ], notes: [ { category: "general", text: "Cross-site scripting (XSS) vulnerability in the Developer Tools (aka DevTools) subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux allows remote attackers to inject arbitrary web script or HTML via the settings parameter in a chrome-devtools-frontend.appspot.com URL's query string.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5165", url: "https://www.suse.com/security/cve/CVE-2016-5165", }, { category: "external", summary: "SUSE Bug 996648 for CVE-2016-5165", url: "https://bugzilla.suse.com/996648", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.1, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5165", }, { cve: "CVE-2016-5166", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5166", }, ], notes: [ { category: "general", text: "The download implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly restrict saving a file:// URL that is referenced by an http:// URL, which makes it easier for user-assisted remote attackers to discover NetNTLM hashes and conduct SMB relay attacks via a crafted web page that is accessed with the \"Save page as\" menu choice.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5166", url: "https://www.suse.com/security/cve/CVE-2016-5166", }, { category: "external", summary: "SUSE Bug 996648 for CVE-2016-5166", url: "https://bugzilla.suse.com/996648", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 3.1, baseSeverity: "LOW", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5166", }, { cve: "CVE-2016-5170", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5170", }, ], notes: [ { category: "general", text: "WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not properly consider getter side effects during array key conversion, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted Indexed Database (aka IndexedDB) API calls.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5170", url: "https://www.suse.com/security/cve/CVE-2016-5170", }, { category: "external", summary: "SUSE Bug 998743 for CVE-2016-5170", url: "https://bugzilla.suse.com/998743", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5170", }, { cve: "CVE-2016-5171", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5171", }, ], notes: [ { category: "general", text: "WebKit/Source/bindings/templates/interface.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not prevent certain constructor calls, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5171", url: "https://www.suse.com/security/cve/CVE-2016-5171", }, { category: "external", summary: "SUSE Bug 998743 for CVE-2016-5171", url: "https://bugzilla.suse.com/998743", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5171", }, { cve: "CVE-2016-5172", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5172", }, ], notes: [ { category: "general", text: "The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attackers to obtain sensitive information from arbitrary memory locations via crafted JavaScript code.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5172", url: "https://www.suse.com/security/cve/CVE-2016-5172", }, { category: "external", summary: "SUSE Bug 998743 for CVE-2016-5172", url: "https://bugzilla.suse.com/998743", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.1", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5172", }, { cve: "CVE-2016-5173", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5173", }, ], notes: [ { category: "general", text: "The extensions subsystem in Google Chrome before 53.0.2785.113 does not properly restrict access to Object.prototype, which allows remote attackers to load unintended resources, and consequently trigger unintended JavaScript function calls and bypass the Same Origin Policy via an indirect interception attack.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5173", url: "https://www.suse.com/security/cve/CVE-2016-5173", }, { category: "external", summary: "SUSE Bug 998743 for CVE-2016-5173", url: "https://bugzilla.suse.com/998743", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.1, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5173", }, { cve: "CVE-2016-5174", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5174", }, ], notes: [ { category: "general", text: "browser/ui/cocoa/browser_window_controller_private.mm in Google Chrome before 53.0.2785.113 does not process fullscreen toggle requests during a fullscreen transition, which allows remote attackers to cause a denial of service (unsuppressed popup) via a crafted web site.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5174", url: "https://www.suse.com/security/cve/CVE-2016-5174", }, { category: "external", summary: "SUSE Bug 998743 for CVE-2016-5174", url: "https://bugzilla.suse.com/998743", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5174", }, { cve: "CVE-2016-5175", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5175", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.113 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5175", url: "https://www.suse.com/security/cve/CVE-2016-5175", }, { category: "external", summary: "SUSE Bug 998743 for CVE-2016-5175", url: "https://bugzilla.suse.com/998743", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5175", }, { cve: "CVE-2016-5177", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5177", }, ], notes: [ { category: "general", text: "Use-after-free vulnerability in V8 in Google Chrome before 53.0.2785.143 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5177", url: "https://www.suse.com/security/cve/CVE-2016-5177", }, { category: "external", summary: "SUSE Bug 1002140 for CVE-2016-5177", url: "https://bugzilla.suse.com/1002140", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5177", }, { cve: "CVE-2016-5178", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5178", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5178", url: "https://www.suse.com/security/cve/CVE-2016-5178", }, { category: "external", summary: "SUSE Bug 1002140 for CVE-2016-5178", url: "https://bugzilla.suse.com/1002140", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-5178", }, { cve: "CVE-2016-5181", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5181", }, ], notes: [ { category: "general", text: "Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted execution of v8 microtasks while the DOM was in an inconsistent state, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via crafted HTML pages.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5181", url: "https://www.suse.com/security/cve/CVE-2016-5181", }, { category: "external", summary: "SUSE Bug 1004465 for CVE-2016-5181", url: "https://bugzilla.suse.com/1004465", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.1, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-5181", }, { cve: "CVE-2016-5182", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5182", }, ], notes: [ { category: "general", text: "Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation in bitmap handling, which allowed a remote attacker to potentially exploit heap corruption via crafted HTML pages.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5182", url: "https://www.suse.com/security/cve/CVE-2016-5182", }, { category: "external", summary: "SUSE Bug 1004465 for CVE-2016-5182", url: "https://bugzilla.suse.com/1004465", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-5182", }, { cve: "CVE-2016-5183", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5183", }, ], notes: [ { category: "general", text: "A heap use after free in PDFium in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android allows a remote attacker to potentially exploit heap corruption via crafted PDF files.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5183", url: "https://www.suse.com/security/cve/CVE-2016-5183", }, { category: "external", summary: "SUSE Bug 1004465 for CVE-2016-5183", url: "https://bugzilla.suse.com/1004465", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-5183", }, { cve: "CVE-2016-5184", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5184", }, ], notes: [ { category: "general", text: "PDFium in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled object lifecycles in CFFL_FormFillter::KillFocusForAnnot, which allowed a remote attacker to potentially exploit heap corruption via crafted PDF files.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5184", url: "https://www.suse.com/security/cve/CVE-2016-5184", }, { category: "external", summary: "SUSE Bug 1004465 for CVE-2016-5184", url: "https://bugzilla.suse.com/1004465", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-5184", }, { cve: "CVE-2016-5185", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5185", }, ], notes: [ { category: "general", text: "Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly allowed reentrance of FrameView::updateLifecyclePhasesInternal(), which allowed a remote attacker to perform an out of bounds memory read via crafted HTML pages.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5185", url: "https://www.suse.com/security/cve/CVE-2016-5185", }, { category: "external", summary: "SUSE Bug 1004465 for CVE-2016-5185", url: "https://bugzilla.suse.com/1004465", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-5185", }, { cve: "CVE-2016-5186", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5186", }, ], notes: [ { category: "general", text: "Devtools in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled objects after a tab crash, which allowed a remote attacker to perform an out of bounds memory read via crafted PDF files.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5186", url: "https://www.suse.com/security/cve/CVE-2016-5186", }, { category: "external", summary: "SUSE Bug 1004465 for CVE-2016-5186", url: "https://bugzilla.suse.com/1004465", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-5186", }, { cve: "CVE-2016-5187", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5187", }, ], notes: [ { category: "general", text: "Google Chrome prior to 54.0.2840.85 for Android incorrectly handled rapid transition into and out of full screen mode, which allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via crafted HTML pages.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5187", url: "https://www.suse.com/security/cve/CVE-2016-5187", }, { category: "external", summary: "SUSE Bug 1004465 for CVE-2016-5187", url: "https://bugzilla.suse.com/1004465", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-5187", }, { cve: "CVE-2016-5188", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5188", }, ], notes: [ { category: "general", text: "Multiple issues in Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux allow a remote attacker to spoof various parts of browser UI via crafted HTML pages.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5188", url: "https://www.suse.com/security/cve/CVE-2016-5188", }, { category: "external", summary: "SUSE Bug 1004465 for CVE-2016-5188", url: "https://bugzilla.suse.com/1004465", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-5188", }, { cve: "CVE-2016-5189", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5189", }, ], notes: [ { category: "general", text: "Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted navigation to blob URLs with non-canonical origins, which allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via crafted HTML pages.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5189", url: "https://www.suse.com/security/cve/CVE-2016-5189", }, { category: "external", summary: "SUSE Bug 1004465 for CVE-2016-5189", url: "https://bugzilla.suse.com/1004465", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-5189", }, { cve: "CVE-2016-5190", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5190", }, ], notes: [ { category: "general", text: "Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled object lifecycles during shutdown, which allowed a remote attacker to perform an out of bounds memory read via crafted HTML pages.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5190", url: "https://www.suse.com/security/cve/CVE-2016-5190", }, { category: "external", summary: "SUSE Bug 1004465 for CVE-2016-5190", url: "https://bugzilla.suse.com/1004465", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-5190", }, { cve: "CVE-2016-5191", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5191", }, ], notes: [ { category: "general", text: "Bookmark handling in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation of supplied data, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via crafted HTML pages, as demonstrated by an interpretation conflict between userinfo and scheme in an http://javascript:payload@example.com URL.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5191", url: "https://www.suse.com/security/cve/CVE-2016-5191", }, { category: "external", summary: "SUSE Bug 1004465 for CVE-2016-5191", url: "https://bugzilla.suse.com/1004465", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.1, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-5191", }, { cve: "CVE-2016-5192", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5192", }, ], notes: [ { category: "general", text: "Blink in Google Chrome prior to 54.0.2840.59 for Windows missed a CORS check on redirect in TextTrackLoader, which allowed a remote attacker to bypass cross-origin restrictions via crafted HTML pages.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5192", url: "https://www.suse.com/security/cve/CVE-2016-5192", }, { category: "external", summary: "SUSE Bug 1004465 for CVE-2016-5192", url: "https://bugzilla.suse.com/1004465", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-5192", }, { cve: "CVE-2016-5193", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5193", }, ], notes: [ { category: "general", text: "Google Chrome prior to 54.0 for iOS had insufficient validation of URLs for windows open by DOM, which allowed a remote attacker to bypass restrictions on navigation to certain URL schemes via crafted HTML pages.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5193", url: "https://www.suse.com/security/cve/CVE-2016-5193", }, { category: "external", summary: "SUSE Bug 1004465 for CVE-2016-5193", url: "https://bugzilla.suse.com/1004465", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-5193", }, { cve: "CVE-2016-5198", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5198", }, ], notes: [ { category: "general", text: "V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to perform arbitrary read/write operations, leading to code execution, via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5198", url: "https://www.suse.com/security/cve/CVE-2016-5198", }, { category: "external", summary: "SUSE Bug 1008274 for CVE-2016-5198", url: "https://bugzilla.suse.com/1008274", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-5198", }, { cve: "CVE-2016-5199", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5199", }, ], notes: [ { category: "general", text: "An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted video file.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5199", url: "https://www.suse.com/security/cve/CVE-2016-5199", }, { category: "external", summary: "SUSE Bug 1009892 for CVE-2016-5199", url: "https://bugzilla.suse.com/1009892", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5199", }, { cve: "CVE-2016-5200", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5200", }, ], notes: [ { category: "general", text: "V8 in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android incorrectly applied type rules, which allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5200", url: "https://www.suse.com/security/cve/CVE-2016-5200", }, { category: "external", summary: "SUSE Bug 1009893 for CVE-2016-5200", url: "https://bugzilla.suse.com/1009893", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-5200", }, { cve: "CVE-2016-5201", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5201", }, ], notes: [ { category: "general", text: "A leak of privateClass in the extensions API in Google Chrome prior to 54.0.2840.100 for Linux, and 54.0.2840.99 for Windows, and 54.0.2840.98 for Mac allowed a remote attacker to access privileged JavaScript code via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5201", url: "https://www.suse.com/security/cve/CVE-2016-5201", }, { category: "external", summary: "SUSE Bug 1009894 for CVE-2016-5201", url: "https://bugzilla.suse.com/1009894", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-5201", }, { cve: "CVE-2016-5202", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5202", }, ], notes: [ { category: "general", text: "browser/extensions/api/dial/dial_registry.cc in Google Chrome before 54.0.2840.98 on macOS, before 54.0.2840.99 on Windows, and before 54.0.2840.100 on Linux neglects to copy a device ID before an erase() call, which causes the erase operation to access data that that erase operation will destroy.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5202", url: "https://www.suse.com/security/cve/CVE-2016-5202", }, { category: "external", summary: "SUSE Bug 1009895 for CVE-2016-5202", url: "https://bugzilla.suse.com/1009895", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5202", }, { cve: "CVE-2016-5203", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5203", }, ], notes: [ { category: "general", text: "A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5203", url: "https://www.suse.com/security/cve/CVE-2016-5203", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5203", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5203", }, { cve: "CVE-2016-5204", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5204", }, ], notes: [ { category: "general", text: "Leaking of an SVG shadow tree leading to corruption of the DOM tree in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5204", url: "https://www.suse.com/security/cve/CVE-2016-5204", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5204", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.1, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-5204", }, { cve: "CVE-2016-5205", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5205", }, ], notes: [ { category: "general", text: "Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac, incorrectly handles deferred page loads, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5205", url: "https://www.suse.com/security/cve/CVE-2016-5205", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5205", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.1, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-5205", }, { cve: "CVE-2016-5206", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5206", }, ], notes: [ { category: "general", text: "The PDF plugin in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly followed redirects, which allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5206", url: "https://www.suse.com/security/cve/CVE-2016-5206", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5206", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5206", }, { cve: "CVE-2016-5207", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5207", }, ], notes: [ { category: "general", text: "In Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android, corruption of the DOM tree could occur during the removal of a full screen element, which allowed a remote attacker to achieve arbitrary code execution via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5207", url: "https://www.suse.com/security/cve/CVE-2016-5207", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5207", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.1, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-5207", }, { cve: "CVE-2016-5208", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5208", }, ], notes: [ { category: "general", text: "Blink in Google Chrome prior to 55.0.2883.75 for Linux and Windows, and 55.0.2883.84 for Android allowed possible corruption of the DOM tree during synchronous event handling, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5208", url: "https://www.suse.com/security/cve/CVE-2016-5208", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5208", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.1, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-5208", }, { cve: "CVE-2016-5209", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5209", }, ], notes: [ { category: "general", text: "Bad casting in bitmap manipulation in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5209", url: "https://www.suse.com/security/cve/CVE-2016-5209", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5209", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5209", }, { cve: "CVE-2016-5210", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5210", }, ], notes: [ { category: "general", text: "Heap buffer overflow during TIFF image parsing in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5210", url: "https://www.suse.com/security/cve/CVE-2016-5210", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5210", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5210", }, { cve: "CVE-2016-5211", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5211", }, ], notes: [ { category: "general", text: "A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5211", url: "https://www.suse.com/security/cve/CVE-2016-5211", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5211", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5211", }, { cve: "CVE-2016-5212", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5212", }, ], notes: [ { category: "general", text: "Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android insufficiently sanitized DevTools URLs, which allowed a remote attacker to read local files via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5212", url: "https://www.suse.com/security/cve/CVE-2016-5212", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5212", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-5212", }, { cve: "CVE-2016-5213", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5213", }, ], notes: [ { category: "general", text: "A use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5213", url: "https://www.suse.com/security/cve/CVE-2016-5213", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5213", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-5213", }, { cve: "CVE-2016-5214", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5214", }, ], notes: [ { category: "general", text: "Google Chrome prior to 55.0.2883.75 for Windows mishandled downloaded files, which allowed a remote attacker to prevent the downloaded file from receiving the Mark of the Web via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5214", url: "https://www.suse.com/security/cve/CVE-2016-5214", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5214", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-5214", }, { cve: "CVE-2016-5215", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5215", }, ], notes: [ { category: "general", text: "A use after free in webaudio in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5215", url: "https://www.suse.com/security/cve/CVE-2016-5215", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5215", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-5215", }, { cve: "CVE-2016-5216", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5216", }, ], notes: [ { category: "general", text: "A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5216", url: "https://www.suse.com/security/cve/CVE-2016-5216", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5216", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-5216", }, { cve: "CVE-2016-5217", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5217", }, ], notes: [ { category: "general", text: "The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly permitted access to privileged plugins, which allowed a remote attacker to bypass site isolation via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5217", url: "https://www.suse.com/security/cve/CVE-2016-5217", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5217", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-5217", }, { cve: "CVE-2016-5218", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5218", }, ], notes: [ { category: "general", text: "The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation within PDFs, which allowed a remote attacker to temporarily spoof the contents of the Omnibox (URL bar) via a crafted HTML page containing PDF data.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5218", url: "https://www.suse.com/security/cve/CVE-2016-5218", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5218", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-5218", }, { cve: "CVE-2016-5219", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5219", }, ], notes: [ { category: "general", text: "A heap use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5219", url: "https://www.suse.com/security/cve/CVE-2016-5219", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5219", url: "https://bugzilla.suse.com/1013236", }, { category: "external", summary: "SUSE Bug 1013274 for CVE-2016-5219", url: "https://bugzilla.suse.com/1013274", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-5219", }, { cve: "CVE-2016-5220", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5220", }, ], notes: [ { category: "general", text: "PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation within PDFs, which allowed a remote attacker to read local files via a crafted PDF file.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5220", url: "https://www.suse.com/security/cve/CVE-2016-5220", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5220", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-5220", }, { cve: "CVE-2016-5221", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5221", }, ], notes: [ { category: "general", text: "Type confusion in libGLESv2 in ANGLE in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android possibly allowed a remote attacker to bypass buffer validation via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5221", url: "https://www.suse.com/security/cve/CVE-2016-5221", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5221", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-5221", }, { cve: "CVE-2016-5222", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5222", }, ], notes: [ { category: "general", text: "Incorrect handling of invalid URLs in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5222", url: "https://www.suse.com/security/cve/CVE-2016-5222", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5222", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-5222", }, { cve: "CVE-2016-5223", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5223", }, ], notes: [ { category: "general", text: "Integer overflow in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption or DoS via a crafted PDF file.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5223", url: "https://www.suse.com/security/cve/CVE-2016-5223", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5223", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-5223", }, { cve: "CVE-2016-5224", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5224", }, ], notes: [ { category: "general", text: "A timing attack on denormalized floating point arithmetic in SVG filters in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5224", url: "https://www.suse.com/security/cve/CVE-2016-5224", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5224", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-5224", }, { cve: "CVE-2016-5225", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5225", }, ], notes: [ { category: "general", text: "Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled form actions, which allowed a remote attacker to bypass Content Security Policy via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5225", url: "https://www.suse.com/security/cve/CVE-2016-5225", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5225", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-5225", }, { cve: "CVE-2016-5226", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5226", }, ], notes: [ { category: "general", text: "Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac executed javascript: URLs entered in the URL bar in the context of the current tab, which allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5226", url: "https://www.suse.com/security/cve/CVE-2016-5226", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5226", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.1, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-5226", }, { cve: "CVE-2016-9650", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-9650", }, ], notes: [ { category: "general", text: "Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled iframes, which allowed a remote attacker to bypass a no-referrer policy via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-9650", url: "https://www.suse.com/security/cve/CVE-2016-9650", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-9650", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-9650", }, { cve: "CVE-2016-9651", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-9651", }, ], notes: [ { category: "general", text: "A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-9651", url: "https://www.suse.com/security/cve/CVE-2016-9651", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-9651", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-9651", }, { cve: "CVE-2016-9652", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-9652", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-9652", url: "https://www.suse.com/security/cve/CVE-2016-9652", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-9652", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromedriver-55.0.2883.75-3.1.x86_64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.aarch64", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.ppc64le", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.s390x", "openSUSE Tumbleweed:chromium-55.0.2883.75-3.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2016-9652", }, ], }
opensuse-su-2017:0563-1
Vulnerability from csaf_opensuse
Published
2016-12-16 22:45
Modified
2016-12-16 22:45
Summary
Security update for Chromium
Notes
Title of the patch
Security update for Chromium
Description of the patch
This update to Chromium 55.0.2883.75 fixes the following vulnerabilities:
- CVE-2016-9651: Private property access in V8
- CVE-2016-5208: Universal XSS in Blink
- CVE-2016-5207: Universal XSS in Blink
- CVE-2016-5206: Same-origin bypass in PDFium
- CVE-2016-5205: Universal XSS in Blink
- CVE-2016-5204: Universal XSS in Blink
- CVE-2016-5209: Out of bounds write in Blink
- CVE-2016-5203: Use after free in PDFium
- CVE-2016-5210: Out of bounds write in PDFium
- CVE-2016-5212: Local file disclosure in DevTools
- CVE-2016-5211: Use after free in PDFium
- CVE-2016-5213: Use after free in V8
- CVE-2016-5214: File download protection bypass
- CVE-2016-5216: Use after free in PDFium
- CVE-2016-5215: Use after free in Webaudio
- CVE-2016-5217: Use of unvalidated data in PDFium
- CVE-2016-5218: Address spoofing in Omnibox
- CVE-2016-5219: Use after free in V8
- CVE-2016-5221: Integer overflow in ANGLE
- CVE-2016-5220: Local file access in PDFium
- CVE-2016-5222: Address spoofing in Omnibox
- CVE-2016-9650: CSP Referrer disclosure
- CVE-2016-5223: Integer overflow in PDFium
- CVE-2016-5226: Limited XSS in Blink
- CVE-2016-5225: CSP bypass in Blink
- CVE-2016-5224: Same-origin bypass in SVG
- CVE-2016-9652: Various fixes from internal audits, fuzzing and other initiatives
The default bookmarks override was removed.
The following packaging changes are included:
- Switch to system libraries: harfbuzz, zlib, ffmpeg, where available.
- Chromium now requires harfbuzz >= 1.3.0
Patchnames
openSUSE-2016-1496
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for Chromium", title: "Title of the patch", }, { category: "description", text: "This update to Chromium 55.0.2883.75 fixes the following vulnerabilities:\n\n- CVE-2016-9651: Private property access in V8\n- CVE-2016-5208: Universal XSS in Blink\n- CVE-2016-5207: Universal XSS in Blink\n- CVE-2016-5206: Same-origin bypass in PDFium\n- CVE-2016-5205: Universal XSS in Blink\n- CVE-2016-5204: Universal XSS in Blink\n- CVE-2016-5209: Out of bounds write in Blink\n- CVE-2016-5203: Use after free in PDFium\n- CVE-2016-5210: Out of bounds write in PDFium\n- CVE-2016-5212: Local file disclosure in DevTools\n- CVE-2016-5211: Use after free in PDFium\n- CVE-2016-5213: Use after free in V8\n- CVE-2016-5214: File download protection bypass\n- CVE-2016-5216: Use after free in PDFium\n- CVE-2016-5215: Use after free in Webaudio\n- CVE-2016-5217: Use of unvalidated data in PDFium\n- CVE-2016-5218: Address spoofing in Omnibox\n- CVE-2016-5219: Use after free in V8\n- CVE-2016-5221: Integer overflow in ANGLE\n- CVE-2016-5220: Local file access in PDFium\n- CVE-2016-5222: Address spoofing in Omnibox\n- CVE-2016-9650: CSP Referrer disclosure\n- CVE-2016-5223: Integer overflow in PDFium\n- CVE-2016-5226: Limited XSS in Blink\n- CVE-2016-5225: CSP bypass in Blink\n- CVE-2016-5224: Same-origin bypass in SVG\n- CVE-2016-9652: Various fixes from internal audits, fuzzing and other initiatives\n\nThe default bookmarks override was removed.\n\nThe following packaging changes are included:\n\n- Switch to system libraries: harfbuzz, zlib, ffmpeg, where available.\n- Chromium now requires harfbuzz >= 1.3.0", title: "Description of the patch", }, { category: "details", text: "openSUSE-2016-1496", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2017_0563-1.json", }, { category: "self", summary: "URL for openSUSE-SU-2017:0563-1", url: "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IOM3J2HPT4XSGXITE6DSNQRVKV6CULMT/#IOM3J2HPT4XSGXITE6DSNQRVKV6CULMT", }, { category: "self", summary: "E-Mail link for openSUSE-SU-2017:0563-1", url: "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IOM3J2HPT4XSGXITE6DSNQRVKV6CULMT/#IOM3J2HPT4XSGXITE6DSNQRVKV6CULMT", }, { category: "self", summary: "SUSE Bug 1013236", url: "https://bugzilla.suse.com/1013236", }, { category: "self", summary: "SUSE CVE CVE-2016-5203 page", url: "https://www.suse.com/security/cve/CVE-2016-5203/", }, { category: "self", summary: "SUSE CVE CVE-2016-5204 page", url: "https://www.suse.com/security/cve/CVE-2016-5204/", }, { category: "self", summary: "SUSE CVE CVE-2016-5205 page", url: "https://www.suse.com/security/cve/CVE-2016-5205/", }, { category: "self", summary: "SUSE CVE CVE-2016-5206 page", url: "https://www.suse.com/security/cve/CVE-2016-5206/", }, { category: "self", summary: "SUSE CVE CVE-2016-5207 page", url: "https://www.suse.com/security/cve/CVE-2016-5207/", }, { category: "self", summary: "SUSE CVE CVE-2016-5208 page", url: "https://www.suse.com/security/cve/CVE-2016-5208/", }, { category: "self", summary: "SUSE CVE CVE-2016-5209 page", url: "https://www.suse.com/security/cve/CVE-2016-5209/", }, { category: "self", summary: "SUSE CVE CVE-2016-5210 page", url: "https://www.suse.com/security/cve/CVE-2016-5210/", }, { category: "self", summary: "SUSE CVE CVE-2016-5211 page", url: "https://www.suse.com/security/cve/CVE-2016-5211/", }, { category: "self", summary: "SUSE CVE CVE-2016-5212 page", url: "https://www.suse.com/security/cve/CVE-2016-5212/", }, { category: "self", summary: "SUSE CVE CVE-2016-5213 page", url: "https://www.suse.com/security/cve/CVE-2016-5213/", }, { category: "self", summary: "SUSE CVE CVE-2016-5214 page", url: "https://www.suse.com/security/cve/CVE-2016-5214/", }, { category: "self", summary: "SUSE CVE CVE-2016-5215 page", url: "https://www.suse.com/security/cve/CVE-2016-5215/", }, { category: "self", summary: "SUSE CVE CVE-2016-5216 page", url: "https://www.suse.com/security/cve/CVE-2016-5216/", }, { category: "self", summary: "SUSE CVE CVE-2016-5217 page", url: "https://www.suse.com/security/cve/CVE-2016-5217/", }, { category: "self", summary: "SUSE CVE CVE-2016-5218 page", url: "https://www.suse.com/security/cve/CVE-2016-5218/", }, { category: "self", summary: "SUSE CVE CVE-2016-5219 page", url: "https://www.suse.com/security/cve/CVE-2016-5219/", }, { category: "self", summary: "SUSE CVE CVE-2016-5220 page", url: "https://www.suse.com/security/cve/CVE-2016-5220/", }, { category: "self", summary: "SUSE CVE CVE-2016-5221 page", url: "https://www.suse.com/security/cve/CVE-2016-5221/", }, { category: "self", summary: "SUSE CVE CVE-2016-5222 page", url: "https://www.suse.com/security/cve/CVE-2016-5222/", }, { category: "self", summary: "SUSE CVE CVE-2016-5223 page", url: "https://www.suse.com/security/cve/CVE-2016-5223/", }, { category: "self", summary: "SUSE CVE CVE-2016-5224 page", url: "https://www.suse.com/security/cve/CVE-2016-5224/", }, { category: "self", summary: "SUSE CVE CVE-2016-5225 page", url: "https://www.suse.com/security/cve/CVE-2016-5225/", }, { category: "self", summary: "SUSE CVE CVE-2016-5226 page", url: "https://www.suse.com/security/cve/CVE-2016-5226/", }, { category: "self", summary: "SUSE CVE CVE-2016-9650 page", url: "https://www.suse.com/security/cve/CVE-2016-9650/", }, { category: "self", summary: "SUSE CVE CVE-2016-9651 page", url: "https://www.suse.com/security/cve/CVE-2016-9651/", }, { category: "self", summary: "SUSE CVE CVE-2016-9652 page", url: "https://www.suse.com/security/cve/CVE-2016-9652/", }, ], title: "Security update for Chromium", tracking: { current_release_date: "2016-12-16T22:45:25Z", generator: { date: "2016-12-16T22:45:25Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "openSUSE-SU-2017:0563-1", initial_release_date: "2016-12-16T22:45:25Z", revision_history: [ { date: "2016-12-16T22:45:25Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "chromedriver-55.0.2883.75-2.1.x86_64", product: { name: "chromedriver-55.0.2883.75-2.1.x86_64", product_id: "chromedriver-55.0.2883.75-2.1.x86_64", }, }, { category: "product_version", name: "chromium-55.0.2883.75-2.1.x86_64", product: { name: "chromium-55.0.2883.75-2.1.x86_64", product_id: "chromium-55.0.2883.75-2.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE Package Hub 12 SP2", product: { name: "SUSE Package Hub 12 SP2", product_id: "SUSE Package Hub 12 SP2", product_identification_helper: { cpe: "cpe:/o:suse:packagehub:12:sp2", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "chromedriver-55.0.2883.75-2.1.x86_64 as component of SUSE Package Hub 12 SP2", product_id: "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", }, product_reference: "chromedriver-55.0.2883.75-2.1.x86_64", relates_to_product_reference: "SUSE Package Hub 12 SP2", }, { category: "default_component_of", full_product_name: { name: "chromium-55.0.2883.75-2.1.x86_64 as component of SUSE Package Hub 12 SP2", product_id: "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", }, product_reference: "chromium-55.0.2883.75-2.1.x86_64", relates_to_product_reference: "SUSE Package Hub 12 SP2", }, ], }, vulnerabilities: [ { cve: "CVE-2016-5203", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5203", }, ], notes: [ { category: "general", text: "A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5203", url: "https://www.suse.com/security/cve/CVE-2016-5203", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5203", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-12-16T22:45:25Z", details: "important", }, ], title: "CVE-2016-5203", }, { cve: "CVE-2016-5204", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5204", }, ], notes: [ { category: "general", text: "Leaking of an SVG shadow tree leading to corruption of the DOM tree in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5204", url: "https://www.suse.com/security/cve/CVE-2016-5204", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5204", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.1, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", version: "3.0", }, products: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-12-16T22:45:25Z", details: "moderate", }, ], title: "CVE-2016-5204", }, { cve: "CVE-2016-5205", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5205", }, ], notes: [ { category: "general", text: "Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac, incorrectly handles deferred page loads, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5205", url: "https://www.suse.com/security/cve/CVE-2016-5205", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5205", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.1, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", version: "3.0", }, products: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-12-16T22:45:25Z", details: "moderate", }, ], title: "CVE-2016-5205", }, { cve: "CVE-2016-5206", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5206", }, ], notes: [ { category: "general", text: "The PDF plugin in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly followed redirects, which allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5206", url: "https://www.suse.com/security/cve/CVE-2016-5206", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5206", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-12-16T22:45:25Z", details: "important", }, ], title: "CVE-2016-5206", }, { cve: "CVE-2016-5207", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5207", }, ], notes: [ { category: "general", text: "In Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android, corruption of the DOM tree could occur during the removal of a full screen element, which allowed a remote attacker to achieve arbitrary code execution via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5207", url: "https://www.suse.com/security/cve/CVE-2016-5207", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5207", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.1, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", version: "3.0", }, products: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-12-16T22:45:25Z", details: "moderate", }, ], title: "CVE-2016-5207", }, { cve: "CVE-2016-5208", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5208", }, ], notes: [ { category: "general", text: "Blink in Google Chrome prior to 55.0.2883.75 for Linux and Windows, and 55.0.2883.84 for Android allowed possible corruption of the DOM tree during synchronous event handling, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5208", url: "https://www.suse.com/security/cve/CVE-2016-5208", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5208", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.1, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", version: "3.0", }, products: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-12-16T22:45:25Z", details: "moderate", }, ], title: "CVE-2016-5208", }, { cve: "CVE-2016-5209", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5209", }, ], notes: [ { category: "general", text: "Bad casting in bitmap manipulation in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5209", url: "https://www.suse.com/security/cve/CVE-2016-5209", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5209", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-12-16T22:45:25Z", details: "important", }, ], title: "CVE-2016-5209", }, { cve: "CVE-2016-5210", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5210", }, ], notes: [ { category: "general", text: "Heap buffer overflow during TIFF image parsing in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5210", url: "https://www.suse.com/security/cve/CVE-2016-5210", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5210", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-12-16T22:45:25Z", details: "important", }, ], title: "CVE-2016-5210", }, { cve: "CVE-2016-5211", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5211", }, ], notes: [ { category: "general", text: "A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5211", url: "https://www.suse.com/security/cve/CVE-2016-5211", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5211", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-12-16T22:45:25Z", details: "important", }, ], title: "CVE-2016-5211", }, { cve: "CVE-2016-5212", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5212", }, ], notes: [ { category: "general", text: "Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android insufficiently sanitized DevTools URLs, which allowed a remote attacker to read local files via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5212", url: "https://www.suse.com/security/cve/CVE-2016-5212", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5212", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-12-16T22:45:25Z", details: "moderate", }, ], title: "CVE-2016-5212", }, { cve: "CVE-2016-5213", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5213", }, ], notes: [ { category: "general", text: "A use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5213", url: "https://www.suse.com/security/cve/CVE-2016-5213", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5213", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-12-16T22:45:25Z", details: "important", }, ], title: "CVE-2016-5213", }, { cve: "CVE-2016-5214", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5214", }, ], notes: [ { category: "general", text: "Google Chrome prior to 55.0.2883.75 for Windows mishandled downloaded files, which allowed a remote attacker to prevent the downloaded file from receiving the Mark of the Web via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5214", url: "https://www.suse.com/security/cve/CVE-2016-5214", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5214", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", version: "3.0", }, products: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-12-16T22:45:25Z", details: "moderate", }, ], title: "CVE-2016-5214", }, { cve: "CVE-2016-5215", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5215", }, ], notes: [ { category: "general", text: "A use after free in webaudio in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5215", url: "https://www.suse.com/security/cve/CVE-2016-5215", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5215", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", version: "3.0", }, products: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-12-16T22:45:25Z", details: "moderate", }, ], title: "CVE-2016-5215", }, { cve: "CVE-2016-5216", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5216", }, ], notes: [ { category: "general", text: "A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5216", url: "https://www.suse.com/security/cve/CVE-2016-5216", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5216", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", version: "3.0", }, products: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-12-16T22:45:25Z", details: "moderate", }, ], title: "CVE-2016-5216", }, { cve: "CVE-2016-5217", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5217", }, ], notes: [ { category: "general", text: "The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly permitted access to privileged plugins, which allowed a remote attacker to bypass site isolation via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5217", url: "https://www.suse.com/security/cve/CVE-2016-5217", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5217", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-12-16T22:45:25Z", details: "moderate", }, ], title: "CVE-2016-5217", }, { cve: "CVE-2016-5218", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5218", }, ], notes: [ { category: "general", text: "The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation within PDFs, which allowed a remote attacker to temporarily spoof the contents of the Omnibox (URL bar) via a crafted HTML page containing PDF data.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5218", url: "https://www.suse.com/security/cve/CVE-2016-5218", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5218", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-12-16T22:45:25Z", details: "moderate", }, ], title: "CVE-2016-5218", }, { cve: "CVE-2016-5219", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5219", }, ], notes: [ { category: "general", text: "A heap use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5219", url: "https://www.suse.com/security/cve/CVE-2016-5219", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5219", url: "https://bugzilla.suse.com/1013236", }, { category: "external", summary: "SUSE Bug 1013274 for CVE-2016-5219", url: "https://bugzilla.suse.com/1013274", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", version: "3.0", }, products: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-12-16T22:45:25Z", details: "moderate", }, ], title: "CVE-2016-5219", }, { cve: "CVE-2016-5220", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5220", }, ], notes: [ { category: "general", text: "PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation within PDFs, which allowed a remote attacker to read local files via a crafted PDF file.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5220", url: "https://www.suse.com/security/cve/CVE-2016-5220", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5220", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", version: "3.0", }, products: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-12-16T22:45:25Z", details: "moderate", }, ], title: "CVE-2016-5220", }, { cve: "CVE-2016-5221", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5221", }, ], notes: [ { category: "general", text: "Type confusion in libGLESv2 in ANGLE in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android possibly allowed a remote attacker to bypass buffer validation via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5221", url: "https://www.suse.com/security/cve/CVE-2016-5221", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5221", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", version: "3.0", }, products: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-12-16T22:45:25Z", details: "moderate", }, ], title: "CVE-2016-5221", }, { cve: "CVE-2016-5222", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5222", }, ], notes: [ { category: "general", text: "Incorrect handling of invalid URLs in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5222", url: "https://www.suse.com/security/cve/CVE-2016-5222", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5222", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-12-16T22:45:25Z", details: "moderate", }, ], title: "CVE-2016-5222", }, { cve: "CVE-2016-5223", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5223", }, ], notes: [ { category: "general", text: "Integer overflow in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption or DoS via a crafted PDF file.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5223", url: "https://www.suse.com/security/cve/CVE-2016-5223", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5223", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-12-16T22:45:25Z", details: "moderate", }, ], title: "CVE-2016-5223", }, { cve: "CVE-2016-5224", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5224", }, ], notes: [ { category: "general", text: "A timing attack on denormalized floating point arithmetic in SVG filters in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5224", url: "https://www.suse.com/security/cve/CVE-2016-5224", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5224", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", version: "3.0", }, products: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-12-16T22:45:25Z", details: "moderate", }, ], title: "CVE-2016-5224", }, { cve: "CVE-2016-5225", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5225", }, ], notes: [ { category: "general", text: "Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled form actions, which allowed a remote attacker to bypass Content Security Policy via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5225", url: "https://www.suse.com/security/cve/CVE-2016-5225", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5225", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", version: "3.0", }, products: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-12-16T22:45:25Z", details: "moderate", }, ], title: "CVE-2016-5225", }, { cve: "CVE-2016-5226", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-5226", }, ], notes: [ { category: "general", text: "Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac executed javascript: URLs entered in the URL bar in the context of the current tab, which allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-5226", url: "https://www.suse.com/security/cve/CVE-2016-5226", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-5226", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.1, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", version: "3.0", }, products: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-12-16T22:45:25Z", details: "moderate", }, ], title: "CVE-2016-5226", }, { cve: "CVE-2016-9650", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-9650", }, ], notes: [ { category: "general", text: "Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled iframes, which allowed a remote attacker to bypass a no-referrer policy via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-9650", url: "https://www.suse.com/security/cve/CVE-2016-9650", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-9650", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", version: "3.0", }, products: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-12-16T22:45:25Z", details: "moderate", }, ], title: "CVE-2016-9650", }, { cve: "CVE-2016-9651", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-9651", }, ], notes: [ { category: "general", text: "A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-9651", url: "https://www.suse.com/security/cve/CVE-2016-9651", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-9651", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-12-16T22:45:25Z", details: "important", }, ], title: "CVE-2016-9651", }, { cve: "CVE-2016-9652", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-9652", }, ], notes: [ { category: "general", text: "Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-9652", url: "https://www.suse.com/security/cve/CVE-2016-9652", }, { category: "external", summary: "SUSE Bug 1013236 for CVE-2016-9652", url: "https://bugzilla.suse.com/1013236", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Package Hub 12 SP2:chromedriver-55.0.2883.75-2.1.x86_64", "SUSE Package Hub 12 SP2:chromium-55.0.2883.75-2.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2016-12-16T22:45:25Z", details: "critical", }, ], title: "CVE-2016-9652", }, ], }
fkie_cve-2016-9652
Vulnerability from fkie_nvd
Published
2019-11-20 15:15
Modified
2024-11-21 03:01
Severity ?
Summary
Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.
References
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", matchCriteriaId: "76DFFA6C-0AB2-4975-99BB-D8B0CAE4B9DE", versionEndExcluding: "55.0.2883.75", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, ], cveTags: [], descriptions: [ { lang: "en", value: "Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.", }, { lang: "es", value: "múltiples vulnerabilidades no especificadas en Google Chrome anterior a la versión 55,0,2883,75", }, ], id: "CVE-2016-9652", lastModified: "2024-11-21T03:01:34.633", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "HIGH", cvssData: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "COMPLETE", baseScore: 10, confidentialityImpact: "COMPLETE", integrityImpact: "COMPLETE", vectorString: "AV:N/AC:L/Au:N/C:C/I:C/A:C", version: "2.0", }, exploitabilityScore: 10, impactScore: 10, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, exploitabilityScore: 3.9, impactScore: 5.9, source: "nvd@nist.gov", type: "Primary", }, ], }, published: "2019-11-20T15:15:11.523", references: [ { source: "chrome-cve-admin@google.com", url: "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html", }, { source: "chrome-cve-admin@google.com", url: "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html", }, { source: "chrome-cve-admin@google.com", url: "http://rhn.redhat.com/errata/RHSA-2016-2919.html", }, { source: "chrome-cve-admin@google.com", url: "http://www.debian.org/security/2016/dsa-3731", }, { source: "chrome-cve-admin@google.com", url: "http://www.securityfocus.com/bid/94633", }, { source: "chrome-cve-admin@google.com", url: "http://www.ubuntu.com/usn/USN-3153-1", }, { source: "chrome-cve-admin@google.com", url: "https://bugs.chromium.org/p/chromium/issues/detail?id=669928", }, { source: "chrome-cve-admin@google.com", url: "https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html", }, { source: "chrome-cve-admin@google.com", url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7LGZO2VOGJOZUUXNQITD6YMIUQ2L5GTU/", }, { source: "chrome-cve-admin@google.com", url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LV2U7SINGF3SBK7HVKSWFOYLQBUH6PUE/", }, { source: "chrome-cve-admin@google.com", url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZECS3A7ULG4B4YXBKUZMA3NTQBE5HGU/", }, { source: "chrome-cve-admin@google.com", url: "https://security.gentoo.org/glsa/201612-11", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00042.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://rhn.redhat.com/errata/RHSA-2016-2919.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.debian.org/security/2016/dsa-3731", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.securityfocus.com/bid/94633", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.ubuntu.com/usn/USN-3153-1", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://bugs.chromium.org/p/chromium/issues/detail?id=669928", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7LGZO2VOGJOZUUXNQITD6YMIUQ2L5GTU/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LV2U7SINGF3SBK7HVKSWFOYLQBUH6PUE/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZECS3A7ULG4B4YXBKUZMA3NTQBE5HGU/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://security.gentoo.org/glsa/201612-11", }, ], sourceIdentifier: "chrome-cve-admin@google.com", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "NVD-CWE-noinfo", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).
Loading…
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.