openSUSE-SU-2026:21382-1: important: Security update for chromium

openSUSE security update: security update for chromium
-------------------------------------------------------------

Announcement ID: openSUSE-SU-2026:21382-1
Rating: important
References:

  * bsc#1271656



Cross-References:

  * CVE-2026-15899
  * CVE-2026-15900
  * CVE-2026-15901
  * CVE-2026-15902
  * CVE-2026-15903
  * CVE-2026-15904
  * CVE-2026-15905



Affected Products:

         openSUSE Leap 16.0

-------------------------------------------------------------

An update that solves 7 vulnerabilities and has one bug fix can now be installed.

Description:

This update for chromium fixes the following issues:

Changes in chromium:

- Chromium 150.0.7871.128 (boo#1271656):
  * CVE-2026-15899: Use after free in CameraCapture
  * CVE-2026-15900: Use after free in GPU
  * CVE-2026-15901: Use after free in Network
  * CVE-2026-15902: Use after free in Cast
  * CVE-2026-15903: Out of bounds read and write in V8
  * CVE-2026-15904: Use after free in Ozone
  * CVE-2026-15905: Use after free in Aura


Patch instructions:

   To install this openSUSE security update use the suse recommended installation methods
   like YaST online_update or "zypper patch".
   Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

   zypper in -t patch openSUSE-Leap-16.0-packagehub-433=1

Package List:

- openSUSE Leap 16.0:

  chromedriver-150.0.7871.128-bp160.1.1
  chromium-150.0.7871.128-bp160.1.1

References:

  * https://www.suse.com/security/cve/CVE-2026-15899.html
  * https://www.suse.com/security/cve/CVE-2026-15900.html
  * https://www.suse.com/security/cve/CVE-2026-15901.html
  * https://www.suse.com/security/cve/CVE-2026-15902.html
  * https://www.suse.com/security/cve/CVE-2026-15903.html
  * https://www.suse.com/security/cve/CVE-2026-15904.html
  * https://www.suse.com/security/cve/CVE-2026-15905.html