openSUSE-SU-2026:0264-1: important: Security update for chromium

   openSUSE Security Update: Security update for chromium
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2026:0264-1
Rating:             important
References:         #1272460 
Cross-References:   CVE-2026-16804 CVE-2026-16805 CVE-2026-16806
                    CVE-2026-16807
Affected Products:
                    openSUSE Backports SLE-15-SP7
______________________________________________________________________________

   An update that fixes four vulnerabilities is now available.

Description:

   This update for chromium fixes the following issues:

   - Chromium 150.0.7871.186 (boo#1272460):
     * CVE-2026-16807: Out of bounds write in Codecs
     * CVE-2026-16806: Use after free in WebMCP
     * CVE-2026-16805: Use after free in Blink
     * CVE-2026-16804: Use after free in Input


Patch Instructions:

   To install this openSUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - openSUSE Backports SLE-15-SP7:

      zypper in -t patch openSUSE-2026-264=1



Package List:

   - openSUSE Backports SLE-15-SP7 (aarch64 ppc64le x86_64):

      chromedriver-150.0.7871.186-bp157.2.196.1
      chromium-150.0.7871.186-bp157.2.196.1


References:

   https://www.suse.com/security/cve/CVE-2026-16804.html
   https://www.suse.com/security/cve/CVE-2026-16805.html
   https://www.suse.com/security/cve/CVE-2026-16806.html
   https://www.suse.com/security/cve/CVE-2026-16807.html
   https://bugzilla.suse.com/1272460