openSUSE-SU-2026:0254-1: important: Security update for chromium

   openSUSE Security Update: Security update for chromium
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2026:0254-1
Rating:             important
References:         #1271656 
Cross-References:   CVE-2026-15899 CVE-2026-15900 CVE-2026-15901
                    CVE-2026-15902 CVE-2026-15903 CVE-2026-15904
                    CVE-2026-15905
Affected Products:
                    openSUSE Backports SLE-15-SP7
______________________________________________________________________________

   An update that fixes 7 vulnerabilities is now available.

Description:

   This update for chromium fixes the following issues:

   - Chromium 150.0.7871.128 (boo#1271656):
     * CVE-2026-15899: Use after free in CameraCapture
     * CVE-2026-15900: Use after free in GPU
     * CVE-2026-15901: Use after free in Network
     * CVE-2026-15902: Use after free in Cast
     * CVE-2026-15903: Out of bounds read and write in V8
     * CVE-2026-15904: Use after free in Ozone
     * CVE-2026-15905: Use after free in Aura


Patch Instructions:

   To install this openSUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - openSUSE Backports SLE-15-SP7:

      zypper in -t patch openSUSE-2026-254=1



Package List:

   - openSUSE Backports SLE-15-SP7 (aarch64 ppc64le x86_64):

      chromedriver-150.0.7871.128-bp157.2.190.1
      chromium-150.0.7871.128-bp157.2.190.1


References:

   https://www.suse.com/security/cve/CVE-2026-15899.html
   https://www.suse.com/security/cve/CVE-2026-15900.html
   https://www.suse.com/security/cve/CVE-2026-15901.html
   https://www.suse.com/security/cve/CVE-2026-15902.html
   https://www.suse.com/security/cve/CVE-2026-15903.html
   https://www.suse.com/security/cve/CVE-2026-15904.html
   https://www.suse.com/security/cve/CVE-2026-15905.html
   https://bugzilla.suse.com/1271656