openSUSE-SU-2026:0257-1: important: Security update for chromium

   openSUSE Security Update: Security update for chromium
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2026:0257-1
Rating:             important
References:         #1272156 
Cross-References:   CVE-2026-16413 CVE-2026-16414 CVE-2026-16415
                    CVE-2026-16416 CVE-2026-16417 CVE-2026-16418
                    CVE-2026-16419 CVE-2026-16420 CVE-2026-16421
                    CVE-2026-16422 CVE-2026-16423 CVE-2026-16424
                   
Affected Products:
                    openSUSE Backports SLE-15-SP7
______________________________________________________________________________

   An update that fixes 12 vulnerabilities is now available.

Description:

   This update for chromium fixes the following issues:

   - Chromium 150.0.7871.181 (boo#1272156):
     * CVE-2026-16420: Type Confusion in WebAudio
     * CVE-2026-16421: Inappropriate implementation in WebAudio
     * CVE-2026-16413: Out of bounds write in ANGLE
     * CVE-2026-16414: Insufficient validation of untrusted input in
       Chromecast
     * CVE-2026-16415: Insufficient validation of untrusted input in
       Extensions
     * CVE-2026-16416: Integer overflow in Chromecast
     * CVE-2026-16417: Uninitialized Use in Skia
     * CVE-2026-16418: Stack buffer overflow in V8
     * CVE-2026-16419: Out of bounds read and write in ANGLE
     * CVE-2026-16422: Insufficient validation of untrusted input in
       Certificate
     * CVE-2026-16423: Use after free in UI
     * CVE-2026-16424: Use after free in GPU


Patch Instructions:

   To install this openSUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - openSUSE Backports SLE-15-SP7:

      zypper in -t patch openSUSE-2026-257=1



Package List:

   - openSUSE Backports SLE-15-SP7 (aarch64 ppc64le x86_64):

      chromedriver-150.0.7871.181-bp157.2.193.1
      chromium-150.0.7871.181-bp157.2.193.1


References:

   https://www.suse.com/security/cve/CVE-2026-16413.html
   https://www.suse.com/security/cve/CVE-2026-16414.html
   https://www.suse.com/security/cve/CVE-2026-16415.html
   https://www.suse.com/security/cve/CVE-2026-16416.html
   https://www.suse.com/security/cve/CVE-2026-16417.html
   https://www.suse.com/security/cve/CVE-2026-16418.html
   https://www.suse.com/security/cve/CVE-2026-16419.html
   https://www.suse.com/security/cve/CVE-2026-16420.html
   https://www.suse.com/security/cve/CVE-2026-16421.html
   https://www.suse.com/security/cve/CVE-2026-16422.html
   https://www.suse.com/security/cve/CVE-2026-16423.html
   https://www.suse.com/security/cve/CVE-2026-16424.html
   https://bugzilla.suse.com/1272156